174770 matches found
CVE-2026-93815
In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...
CVE-2026-93815
A vulnerability exists in the Linux kernel involving the au1000 driver. The au1000_close() function incorrectly calls free_irq() while holding the aup->lock spinlock. Because free_irq() can sleep while acquiring the desc->request_mutex , this violates kernel locking rules and triggers a Loc...
CVE-2026-93815 net: au1000: move free_irq out of the close-time spinlocked section
In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...
CVE-2026-93815 net: au1000: move free_irq out of the close-time spinlocked section
In the Linux kernel, the following vulnerability has been resolved: net: au1000: move freeirq out of the close-time spinlocked section au1000close calls freeirq while aup-lock is still held with spinlockirqsave. freeirq can sleep because it takes the IRQ descriptor request mutex, so it does not...
EUVD-2026-86199
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...
CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...
CVE-2026-79764
The web-based server management platform Termix versions 2.5.0 through 2.5.1 is vulnerable to an authenticated Server-Side Request Forgery (SSRF) . The /homepage/proxy endpoint accepts a user-provided URL and passes it to http.get or https.get without a destination allowlist. Specifically, the sr...
CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...
CVE-2026-79764 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.5.0 until 2.5.1, the /homepage/proxy endpoint accepts an authenticated user's url query parameter and passes it to http.get or https.get without destination restrictions. In...
CVE-2026-67620-poc
CVE-2026-67620 — Flowise SSRF via incomplete cloud-metadata deny-list Oracle OCI + Alibaba Cloud Product: FlowiseAI/Flowise — visual LLM / AI-agent builder 54k ★ Affected versions: ≤ 3.1.4 — confirmed still vulnerable in 3.1.4 , the latest release re-verified 2026-08-06 Vulnerability: Server-Side...
What’s new in Microsoft Security: September 2026
AI agents are now running on employee devices, cloud platforms, and across developer workflows. Security teams need to see those agents, govern what they can reach, and contain them when something goes wrong. This month's updates help you discover and control local AI agents, extend Zero Trust to...
Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments
In this article 1. Who is Storm-2570? 2. Storm-2570 attack chain: From initial foothold to impact 3. What Storm-2570 activity means for defenders 4. Mitigation and protection guidance 5. Microsoft Defender detections 6. Hunting queries Activity associated with Storm-2570, a ransomware affiliate...
CVE-2026-79759 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...
CVE-2026-79759 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...
EUVD-2026-86160
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 until 2.5.1, the POST /credentials/:id/deploy-to-host endpoint resolves credential and target-host records from attacker-controlled credentialId and targetHostId integer values...
CVE-2026-79759
The web-based server management platform Termix (versions 1.7.0 through 2.5.1) is vulnerable to cross-user information disclosure due to a missing ownership check in the POST /credentials/:id/deploy-to-host endpoint. Located in src/backend/database/routes/credentials.ts, the application fails to ...
CVE-2026-3456-OAuth2-PKCE-Race-Condition-Account-Takeover-
8. CVE-2026-3456 – OAuth2 PKCE レースコンディション（アカウント乗っ取り） 概要 OAuth2 認可サーバーのレースコンディションにより、攻撃者は短い時間ウィンドウ内で PKCE の codeverifier を推測またはブルートフォースし、正規クライアントが認可コードを利用する前に被害者の認可コードを再利用できる可能性があります。 深刻度: 高（アカウント乗っ取り） シミュレーション（Python HTTP サーバー） root@kitploit: !/usr/bin/env python3 """ vulnerableauthserver.py -...
encrypted-linux-kernel-modules
ELKM: 暗号化された Linux x86-64 ローダブルカーネルモジュール ELKM は、暗号化されたローダブルカーネルモジュール LKM を安全に転送およびロードするためのメカニズムを提供します。その目的は、カーネルベースのルートキットやインプラントを、Endpoint Detection and Response EDR ソフトウェアによる監視から保護し、ディスクフォレンジックツールによるリカバリの効果を無効化することです。 RHEL/CentOS 7 ELKM は RHEL/CentOS 7 x86-64 向けに特別に作成されました。 root@kitploit:...
CVE-2026-8206
CVE-2026-8206 脆弱性: 認証なしアカウント乗っ取り — Kirki Customizer Framework におけるパスワードリセットメールの乗っ取り CVSS v3.1 9.8 / 10.0 CRITICAL ベクター: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 1. 概要 CVE-2026-8206 は、Kirki Customizer Framework — 90,000 以上のアクティブインストール数を誇る人気の WordPress ページビルダープラグイン — における認証なしアカウント乗っ取り...