MAL-2026-17690 Malicious code in @galicia-toolkit/spa-build-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d7fc29f59609ed2b5c7b54243b740e1daa001f3c76c4d1391edd85a528a4688 The package's postinstall script runs automatically on npm install and collects installer-side host and credential data: hostname, username, network...

CVE-2026-22019-libcurl-HTTP-2-CONNECT-Tunnel-Mixup

CVE-2026-22019 – Смешивание туннелей HTTP/2 CONNECT в libcurl Код программы C-симуляция // curlhttp2tunnelmixup.c - Simulated libcurl handling CONNECT over HTTP/2 include void handlehttp2streamint streamid // Vulnerability: after CONNECT, the proxy mixes streams with the tunneled data if streamid...

CVE-2026-17566

CVE-2026-17566 — pgAdmin 4 Import/Export Data RCE PoC pgAdmin 4 Import/Export Data 도구 원격 코드 실행 PoC. isqueryparensbalanced 괄호 검사기와 psql의 백슬래시 이스케이프 의미 체계 차이 를 이용하여 \copy ... TO PROGRAM을 주입하고 pgAdmin이 실행 중인 서버에서 임의 명령을 실행합니다. 배경 공격 체인: CVE-2026-17349Workspaces 자격 증명 유출 → CVE-2026-17351AI Assistant ...

CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component

CVE-2026-22010 – 내보낸exported 컴포넌트로의 Android 인텐트 리디렉션 프로그램 코드 Java/Android 시뮬레이션 // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; // Retrieve target...

Antignis

Antignis , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Ссылка на пост в блоге:...

QuickBox-Pro-2.1.8-Authenticated-RCE

QuickBox-Pro-2.1.8-Authenticated-RCE Аутентифицированный пользователь с низкими привилегиями может использовать уязвимость внедрения команд для выполнения кода от имени www-data и повышения привилегий до root из-за слабых правил sudo. QuickBox Pro v2.1.8 и более ранние версии уязвимы...

kernel: vsock/virtio: fix zerocopy completion for multi-skb sends

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...

NGINX_2026_CVE_Bundle_CTI_Report

🛡️ NGINX 2026: расследование множественных CVE CTI CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 Создано Pratik Chhetri Дата отчёта: 2026-07-28 📌 Краткая сводка | CVE | Компонент | Основная проблема | Исправленные версии Open Source | Приоритет |...

hassh

«HASSH» — метод профилирования SSH-клиентов и серверов. ПРИМЕЧАНИЕ: Этот репозиторий Corelight создан для активной поддержки по запросу Salesforce, чей оригинальный репозиторий больше не поддерживается. «HASSH» — это стандарт сетевого профилирования, который можно использовать для идентификации...

kyocera-cve-2022-1026_SOAP1.1

Kyocera cve-2022-1026 soap1.1 Только авторизованное тестирование. Этот проект предоставляется в образовательных целях и для проверки защитных механизмов в средах, которыми вы владеете или на тестирование которых у вас есть явное разрешение. Не используйте его против систем, которыми вы не владеет...

kernel: vsock/virtio: fix zerocopy completion for multi-skb sends

A flaw was found in the Linux kernel's vsock/virtio component. This vulnerability occurs during zerocopy completion for large messages fragmented into multiple socket kernel buffers skbs. An issue in how user arguments uargs are handled for these buffers can lead to pinned user pages not being...

Security Bulletin: Security vulnerability affects the Windows GIM component as part of IBM Guardium Data Protection (CVE-2026-84891)

Summary Security vulnerability has been addressed in the Windows GIM component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-84891 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to obtain sensitive information due to use of hard-coded...

Security Bulletin: Multiple vulnerabilities affect the Sniffer component as part of IBM Guardium Data Protection

Summary Multiple vulnerabilities have been addressed in the Sniffer component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-75875 DESCRIPTION: IBM Guardium Data Protection could allow a remote attacker to execute arbitrary code due to path traversal. CWE:CWE-22:...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Security Bulletin: Security vulnerability affects the UNIX S-TAP component as part of IBM Guardium Data Protection (CVE-2026-87980)

Summary Security vulnerability has been addressed in the UNIX S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-87980 DESCRIPTION: IBM Guardium Data Protection could allow a local attacker to obtain sensitive information due to cleartext storage of...

Important: Red Hat Security Advisory: postgresql:12 security update

An update for the postgresql:12 module is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A...

Security Bulletin: Multiple vulnerabilities affect the Windows S-TAP component as part of IBM Guardium Data Protection (CVE-2026-82344, CVE-2026-82334)

Summary Multiple vulnerabilities have been addressed in the Windows S-TAP component as part of IBM Guardium Data Protection Vulnerability Details CVEID:CVE-2026-82344 DESCRIPTION: IBM Security Guardium is vulnerable to a heap-based buffer overflow in the S-TAP TrafficTap TDS login reassembly...

CVE-2026-90817

CVE-2026-90817 — REDCap 설문 Passthru + 데이터 가져오기 RCE CVE-2026-90817 Securifera / Ryan Wincey에 대한 Python 3 검사기및 구성 가능한 익스플로잇 훅. | ---|--- 제품| REDCap Vanderbilt 영향 받는 버전| ≥ 13.3.0 브랜치 패치 전까지 수정 버전| 16.0.49 LTS, 17.3.10 LTS, 17.4.4 Standard+ CVSS 3.1| 9.8 Critical 인증| 없음 — 전체 체인에는 유효한 공개 설문 해시s= 필요 CW...

CVE-2026-107660

FFmpeg versions prior to 8.1.3 and 9.x before 9.0.2 are vulnerable to an improper certificate validation flaw in the tls_open() function within libavformat/tls_mbedtls.c. The root cause is that the software skips hostname checks for hosts identified by IP addresses. This allows a network attacker...

Inject-PHP-to-JPG-Using-Jhead

Инъекция PHP в JPG с помощью Jhead $ pkg install vim или apt-get install vim $ pkg install jhead или apt-get install jhead $ jhead -h для справки $ jhead -purejpg yourfiles.jpg $ jhead -ce yourfiles.jpg Нажмите ESC, введите :x для сохранения $ jhead yourfiles.jpg Пример:...