EUVD-2026-85469

Unauthenticated Broken Access Control in WP User Manager = 2.9.19 versions...

CVE-2026-75131 NetworkManager-l2tp Privilege Escalation via pppd Username Injection

NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escalation vulnerability that allows local users with permission to create VPN connections to execute arbitrary code as root by injecting pppd options through a crafted VPN username. Attackers can embed a double-quote...

CVE-2026-71459

JobJobEventsChildrenSummary view has no model/parentmodel. ModelAccessPermission.checkgetpermissions falls through returns True for any authenticated user. The view uses raw getobjector404Job, pk without DRF object-level permission check. Zero-privilege user reads event tree structure,...

CVE-2026-71461

HostList.list catches bare Exception and returns stre verbatim. Via hostfilter, any authenticated user triggers Django FieldError leaking complete Host model relation graph including internal reverse accessors or PostgreSQL DataError leaking raw database error strings. Two primitives:...

EUVD-2026-85524

JobJobEventsChildrenSummary view has no model/parentmodel. ModelAccessPermission.checkgetpermissions falls through returns True for any authenticated user. The view uses raw getobjector404Job, pk without DRF object-level permission check. Zero-privilege user reads event tree structure,...

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...

CVE-2026-55632

The continuous delivery server GoCD is affected by an authorization bypass vulnerability in the internal pipeline structure API (versions 20.2.0 through 26.1.0). The API, which is used for autocompletion when editing configurations like pipelines, templates, environments, and user preferences, in...

CVE-2026-52744

The GoCD continuous delivery server versions 20.2.0 through 26.1.0 is vulnerable to an authorization bypass in the internal UI fetch-artifact auto-suggestion API at /go/api/internal/pipelines/**/upstream. Due to inadequate authorization of upstream dependency data, an authenticated user can retri...

CVE-2026-86867 Cinnamon's kotaemon contains improper authorization checks in multi‑user chat handlers

Cinnamon's Kotaemon all versions up to and including v0.12.0 multi-user chat interface contains multiple vulnerabilities due to incorrect authorization and improper access controls. There are four handler methods in libs/ktem/ktem/pages/chat/control.py that load a Conversation record by its ID...

CVE-2024-45337

Proof of Concept exploit for CVE-2024-45337 This repository contains a proof of concept exploit for CVE-2024-45337. It can be used to wrap ssh when interacting with an SSH server which is implemented using golang.org/x/crypto = v0.30.0. while caching permissions in the...

qemu

QEMU 自述文件 QEMU 是一个通用且开源的全机器与用户空间模拟器及虚拟化器。 QEMU 能够在不依赖硬件虚拟化支持的情况下，通过软件模拟完整机器。借助动态翻译技术，它能获得非常好的性能。QEMU 还可以与 Xen 和 KVM 虚拟机监控器集成，在提供模拟硬件的同时，让虚拟机监控器管理 CPU。借助虚拟机监控器支持，QEMU 可以在 CPU 方面达到接近原生的性能。当 QEMU 直接模拟 CPU 时，它能够在一台机器（例如 x8664 PC 主板）上运行专为另一台机器（例如 ARMv7 开发板）设计的操作系统。 QEMU 还能够为 Linux 和 BSD 内核接口提供用户空间 API...

ish

iSH iSH 是一个运行在 iOS 上的 Linux shell。本项目使用了 x86 用户模式仿真和系统调用翻译转换。 请查看 issue 和提交记录以了解本项目当前的状态。 App Store 页面 Testflight 测试 Discord 服务器 维基帮助与教程 上手 本项目下包含了其他 git 项目作为子模块，请确保在克隆时使用参数--recurse-submodules，即 git clone --recurse-submodules https://github.com/ish-app/ish.git。或是在克隆好了之后执行 git submodule update...

CVE-2026-4921

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

EUVD-2026-85370

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol check...

CVE-2026-96656

Plex Media Server versions before 1.43.3.10861 are vulnerable to an arbitrary file write flaw. The issue arises because the TranscoderH264Options preference is appended verbatim to the x264 option string during every transcode. An admin user can exploit this to write arbitrary files that may be e...

EUVD-2026-85369

Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter...

CVE-2025-0133

CVE-2025-0133 Palo Alto PAN-OS reflected XSS in the GlobalProtect gateway and portal getconfig.esp handler. The user query parameter is reflected unencoded into the Captive Portal page; an attacker who lures an authenticated GlobalProtect user to a crafted link can execute JavaScript in the trust...

EUVD-2026-85362

IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...

CVE-2026-6327

The IBM Concert software, versions 1.0.0 through 3.0.0 , is vulnerable to a flaw that allows an unauthorized user to inject data into log messages . This issue stems from the improper neutralization of special elements when they are written to log files. No specific exploit details or remediation...

EUVD-2026-85360

IBM Guardium Data Protection 12.2 could allow an administrative user to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...