60150 matches found
Forced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encryption key metadata stored in the database can cause an...
CVE-2026-35616
CVE-2026-35616 著者: wa6n3r | GitHub | Web 説明 Fortinet API における証明書チェーン検証バイパスの脆弱性を悪用します。 このスクリプトは、複数のソースから有効な Common Name CN を自動的に検出し、 偽のクライアント証明書を生成して、X-SSL-CLIENT-VERIFY および X-SSL-CLIENT-CERT ヘッダーを使用して 保護されたエンドポイントへのリクエストを実行します。 !!!重要 : テストの明示的な許可を得ているシステムでのみ使用してください。 要件 Python 3.8+ 依存関係: requests...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
firefox: thunderbird: Mitigation bypass in the Remote Settings Client component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the Remote Settings Client component...
CVE-2025-4476-Exploit
CVE-2025-4476-Exploit 過大な Authorization: Basic ヘッダーを含むHTTP GETリクエストを送信するための小さなPythonテストクライアントです。 このツールは、ヘッダー解析の問題（例: libsoupにおけるCVE-2025-4476のようなヌル参照/クラッシュバグ）に関するラボテストおよび研究を目的としています。不正な形式のヘッダーを含むクライアント・サーバー間のやり取りが、どのように解析エラーを引き起こすかを示すものであり、エクスプロイトフレームワークではありません。 使用方法:...
CVE-2025-56800
CVE-2025-56800 Reolink デスクトップアプリケーションにおけるローカル認証バイパス脆弱性 1. 概要 名称 : Reolink デスクトップアプリケーション バージョン : 8.18.12 ベンダー : Reolink CWE : CWE-290: スプーフィングによる認証バイパス CVSS : 5.1 MEDIUM ベクター文字列 : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 2. 概要 Reolink デスクトップアプリケーション（バージョン...
AZL-104060 CVE-2026-94281 affecting package libXi 1.8.1-1
An out-of-bounds read in libXi's XListInputDevices class parsing in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...
DEBIAN-CVE-2026-93801
In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifsopeninfodata Stack-allocated cifsopeninfodata may contain random data. This can make some fields have wrong value if they are not set later...
AZL-103775 CVE-2026-93801 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifsopeninfodata Stack-allocated cifsopeninfodata may contain random data. This can make some fields have wrong value if they are not set later...
CVE-2026-93801
In the Linux kernel, the following vulnerability has been resolved: smb/client: zero-initialize stack-allocated cifsopeninfodata Stack-allocated cifsopeninfodata may contain random data. This can make some fields have wrong value if they are not set later...
AZL-103667 CVE-2026-93794 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...
DEBIAN-CVE-2026-93794
In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...
CVE-2026-93794
In the Linux kernel, the following vulnerability has been resolved: smb/client: flush dirty data before punching a hole Punching a hole after a large buffered write may leave the range reported as data. Reproduce it with: xfsio -f \ -c "pwrite -b 3m -S 0x61 0 3m" \ -c "fpunch 1m 1m" \ -c "seek -h...
AZL-104057 CVE-2026-93545 affecting package libXi 1.8.1-1
An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...
CVE-2026-93544
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...
CVE-2026-93545
An out-of-bounds read in libXi's XListInputDevices in libXi before 1.8.4 could be used by malicious X servers to crash an attached X client...
AZL-104069 CVE-2026-93544 affecting package libXi 1.8.1-1
An out-of-bounds read in libXi's XI2 XIQueryDevice reply parsing in libXi before 1.8.4 can be used by a malicious X server to crash an attached X client...
AZL-104063 CVE-2026-93542 affecting package libXi 1.8.1-1
An out-of-bounds read in libXi's XI2 class parsing via sizeclasses and copyclasses in libXi before 1.8.4 could be used by malicous servers to crash the X client...