CVE-2026-22018-Jenkins-Pipeline-Shared-Library-Code-Execution-via-Grab-

CVE-2026-22018 – Jenkins Pipeline Shared Library Code Execution via @Grab Program Code Groovy pipeline // Jenkinsfile - loads untrusted shared library @Library'evil-library@master' node evilStep CVE-2026-22018 – Jenkins Pipeline Shared Library Remote Code Execution Overview A Jenkins pipeline loa...

nuubi

Nuubi Tools Scanner, Recon. Detalles Opciones: -h/--help | Muestra el mensaje de ayuda y sale Argumentos: -b/--banner | Captura de banner de la dirección IP objetivo -s/--subnet | Búsqueda de subred del objetivo -c/--cms | Detección de CMS mediante cabeceras -d/--dns | Consulta DNS del dominio...

vscode-github-token-grab-extension

hello-world README DO NOT INSTALL. This is an extension for me testing out vscode publishing...

Solr-GRAB

Solr-GRAB Roba consultas de instancias de Apache Solr con o sin nombre de usuario y contraseña. DESCARGO DE RESPONSABILIDAD : Este proyecto debe usarse solo para pruebas autorizadas y fines educativos. Descarga git clone https://github.com/GnosticPlayers/Solr-GRAB Uso Puedes buscar instancias de...

sshkey-grab

sshkey-grab Este script explota un error en ssh-agent que permite obtener la última clave añadida al agente. Esto puede permitir recuperar una clave que ha sido eliminada de ssh-agent mediante ssh-add -t, -d o -D, siempre que el ssh-agent no haya sido terminado y no se haya añadido una nueva clav...

Astra Linux – Vulnerability in Vim

“Buffer over-reading” in the grabfilename function in the GitHub repository’s Vim/Vim version prior to 8.2.4956. This vulnerability could cause the software to crash, lead to memory modifications, and may allow for remote execution...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ubifs: A fix was made to increment the reference count of a page once it is set as private. The MM structure defines a rule 1 very clearly: once a page is marked with the PGprivate flag, the reference count of that page should be...

Astra Linux – Vulnerability in xorg-server, xwayland

A heap-based buffer overflow vulnerability was discovered in the X.org server’s ProcXIPassiveGrabDevice function. This issue occurs when length values that are swapped in bytes are used in responses, potentially leading to memory leakage and segmentation faults, especially when triggered by a...

Malicious Package

Overview @grab-food/order-sdk-web is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious code in @grab-food/order-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...

MAL-2026-15681 Malicious code in @grab-food/order-sdk-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa9b56bb1d69dc16b6095faea196af99809ad805b400a3c6b5499f896c8d74c2 Package published under a scope impersonating the Grab food-ordering brand with no real functionality index.js exports an empty object. Its sole...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

CVE-2026-32467 affects the WordPress "[Aotuman] Grab WeChat Articles" plugin up to version 2.0.1. Authenticated subscribers can trigger an SSRF by causing the server to fetch arbitrary internal/external URLs, enabling internal network probing or external requests. CVSS 6.0 MEDIUM (AV:N/AC:H/PR:L/...

CVE-2026-32467 WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

CVE-2026-32467: Server-Side Request Forgery (SSRF)

Subscriber Server Side Request Forgery SSRF in Aotuman Grab WeChat Articles = 2.0.1 versions...

WordPress [Aotuman] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by Nabil Irawan in WordPress Plugin Aotuman Grab WeChat Articles versions = 2.0.1...

Exploit for Allocation of Resources Without Limits or Throttling in Oracle Jre

--- CVE-2026-22018 – Jenkins Pipeline Shared Library Code Ex...

The vulnerability of the grab_extent_buffer() function in the fs/btrfs/extent_io.c module of the Btrfs file system support in the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the grabextentbuffer function in the fs/btrfs/extentio.c module of the btrfs file system support in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...