ROS-20260923-73-0065

The vulnerability of the nfsfiledirectread function in the fs/nfs/direct.c module, which is part of the NFS client support in Linux kernel, is related to data processing errors. Exploiting this vulnerability can allow an attacker to cause service failures...

TencentOS Server 4: nodejs20 (TSSA-2026:1043)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:1043 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

CVE-2026-87121

The lwIP TCP/IP Stack MQTT Client Application is vulnerable to an out-of-bounds write , which could allow an attacker to achieve full code execution on the affected device. While no specific software version or root cause is provided, the vulnerability has been observed in the wild, with sighting...

CVE-2026-87121 Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device...

nextcloud_android

Nextcloud Android アプリ Codacy Badge Nextcloud 用の Android クライアントです。Nextcloud 上のデータを簡単に操作できます。 コントリビュート方法 Nextcloud にコントリビュートしたい方は、大歓迎です： freenode 上の IRC チャンネル と にて フォーラム https://help.nextcloud.com アプリの翻訳は Transifex にて Issue や PR を開くこと（対応する Issue を含む） コントリビューションガイドラインとライセンス GPLv2...

AuroraStore

Aurora Store Aurora Store を使用すると、公式 Google Play ストアからアプリを検索してダウンロードできます。アプリの説明、スクリーンショット、アップデート、レビューを確認し、Google Play から APK を直接デバイスにダウンロードできます。 Aurora Store を使用するには、初回起動時に Aurora Store を設定する際、Google Play アカウントでログインしてください。 従来のアプリストアとは異なり、Aurora Store はアプリを所有、ライセンス、または配布していません。Aurora Store...

RLSA-2026:69130 Important: openssh security update

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fixes: openssh: OpenSSH: sftp client allows attacker to control downloaded file location...

openssh security update

An update is available for openssh. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...

CVE-2024-48910-POC

CVE-2024-48910 개념 증명 이것은 CVE-2024-48910에 대한 개념 증명입니다. 이는 HTML, SVG, MathML을 위한 XSS 정화기인 DOMPurify에 존재했던 취약점입니다. 이 버전의 DOMPurify는 프로토타입 오염prototype pollution에 취약하며, 공격자가 임의의 JS 객체의 기본 프로토타입에 속성을 주입하여 애플리케이션의 모든 후속 객체가 이 악의적인 동작을 상속받도록 할 수 있습니다. 이 데모는 이를 활용하여 클라이언트 측 XSS를 달성하는 방법을 보여줍니다...

CVE-2026-86059

Dokploy is a free, self-hostable Platform as a Service PaaS. Prior to 0.29.13, Dokploy organization members without Git provider access can retrieve plaintext provider credentials through github.one, gitlab.one, gitea.one, and bitbucket.one because those protected procedures return full provider...

DEBIAN-CVE-2026-83603

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

CVE-2026-83603

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

MAL-2026-16508 Malicious code in @client-web-next/tarjeta-button (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16507 Malicious code in @client-web-next/providers (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-16505 Malicious code in @client-web-next/navigation-link (npm)

--- -= Per source details. Do not edit below this line.=-...

EUVD-2026-84564

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

CVE-2026-83603

The open source observability tool Netdata contains a privilege escalation vulnerability in the setuid-root ndsudo helper command (fail2ban-client-status-socket) located in src/collectors/utils/ndsudo.c. A low-privileged netdata service account can provide a caller-controlled --socket_path to dir...

CVE-2026-83603 Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE

Netdata is an open source observability tool. Prior to 2.10.4, the setuid-root ndsudo helper command fail2ban-client-status-socket in src/collectors/utils/ndsudo.c accepts a caller-controlled --socketpath from the low-privileged netdata service account. The account can direct root fail2ban-client...

CVE-2023-30212-Lab

CVE-2023-30212-Lab CVE-2023-30212の脆弱性環境を作成するためのDockerfileとファイルを含むGitHubリポジトリです。このセキュリティ脆弱性の悪用可能性を調査できます。管理された環境で脆弱性の影響を研究・理解するのに、研究者やセキュリティ愛好家に最適です。 このリポジトリをダウンロードするには: git clone https://github.com/mallutrojan/CVE-2023-30212-Lab.git Cd CVE-2023-30212-Lab chmod u+x lab.sh ./lab.sh http://localhost...

CVE-2021-37152

CVE-2021-37152 ワイヤレスTP-LINKでパケットを送信してネットワーククライアントにアクセスし、MITM攻撃の準備を行うエクスプロイト エクスプロイト このエクスプロイトは、ネットワーククライアントへのアクセスとスキャンを目的として設計されており、簡単にアクセスしてMITM攻撃の準備ができます。エクスプロイトはレイヤー3と2で攻撃を行います。詳細は以下で説明します。このエクスプロイトはほとんどのデバイスで実行可能で、テスト済みモデルの範囲と攻撃オプションは次のとおりです。 TP-LINK 54Mbps Wirless ADSL2+ Modem Router TD-W890...