184402 matches found
html/template: golang: Go html/template: Cross-Site Scripting via pathological input
A flaw was found in the html/template component of Go golang. Pathological inputs could prematurely close an unescaped forward slash '/', allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting XSS, where malicious scripts are executed in a user's browser,...
golang: net/http: net/http: sensitive headers incorrectly sent after cross-domain redirect
A flaw was found in the net/http package of the Golang standard library. The HTTP client drops sensitive headers after following a cross-domain redirect. For example, a request to a.com/ containing an Authorization header redirected to b.com/ will not send that header to b.com. However, the...
crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security TLS session resumption when certificate authority CA settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing ...
net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service
A flaw was found in the net/http component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the ReadHeaderTimeout is not correctly applied during this process. This...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
gstreamer-plugins-base: GStreamer: Arbitrary code execution via OGG file parsing buffer overflow
A flaw was found in GStreamer. This vulnerability, a stack-based buffer overflow, occurs during the parsing of OGG files due to improper validation of user-supplied data length. A remote attacker could exploit this by tricking a user into visiting a malicious page or opening a malicious file,...
[SECURITY] Fedora 43 Update: php-pecl-mongodb2-2.1.9-1.fc43
The purpose of this driver is to provide exceptionally thin glue between MongoDB and PHP, implementing only fundemental and performance-critical components necessary to build a fully-functional MongoDB driver...
[SECURITY] Fedora 43 Update: roundcubemail-1.6.19-1.fc43
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
pwnKit
pwnKit Acerca de: Título: pwnKit Descripción: Escalada de privilegios en sistemas operativos tipo Unix AUTOR: drapl0n Versión: 1.0 Categoría: Escalada de Privilegios Objetivo: Sistemas operativos tipo Unix Modos de ataque: HID pwnKit es un payload de USB-Rubber-Ducky para escalada de privilegios,...
pkexec-exploit
pkexec-exploit Escalada de privilegios local en pkexec de polkit CVE-2021-4034 Resumen Polkit anteriormente PolicyKit es un componente para controlar los privilegios a nivel de sistema en sistemas operativos tipo Unix. Proporciona una forma organizada para que los procesos sin privilegios se...
CVE-2026-80274
If a BIND resolver sends a query for a DNSSEC-signed authoritative zon...
CVE-2026-19668
A BIND recursive resolver may experience excessive resource consumptio...
CVE-2026-76163
If BIND is loaded with a "named.conf" file that contains no global "...
CVE-2026-89959
In the Linux kernel, the following vulnerability has been resolved: s...
CVE-2026-90022
In the Linux kernel, the following vulnerability has been resolved: u...
CVE-2026-89876
In the Linux kernel, the following vulnerability has been resolved: m...
CVE-2026-89820
In the Linux kernel, the following vulnerability has been resolved: d...