CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783: Simulación educativa de escape de sandbox para Chrome Autor: Byte Reaper @ByteReaper0 Descripción general Este proyecto es una simulación orientada a la investigación y educativa diseñada para demostrar el concepto de una vulnerabilidad de escape de sandbox en Goog...

CVE-2018-7854

CVE-2018-7854 Affected Products Schneider Electric Modicon M580 Version 2.90 Schneider Electric Modicon M340 Version 3.10 References https://www.se.com/ww/en/download/document/SEVD-2019-134-11/ https://www.talosintelligence.com/vulnerabilityreports/TALOS-2019-0765 Usage root@kitploit: python...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS 信息泄露 📌 关于 Green Hills INTEGRITY RTOS v5.0.4 Telnet 服务器中 格式化字符串 漏洞的技术文档和资源仓库。 📖 概述 该漏洞影响 Green Hills INTEGRITY RTOS 5.0.4 中 Interpeak 的 IPCOMShell Telnet 服务器，其中一个未文档化的命令解释器允许配置命令输入的值。该值直接被用作 printf 函数的输入，未经任何验证 ，从而允许执行恶意格式化字符串。 🔍 影响 ✅ 严重信息泄露...

CVE-2026-63073

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

EUVD-2026-65483

Issue summary: OpenSSL CMP response validation passed an unexpected response sender distinguished name directly as the format string to ERRraisedata. Impact summary: A malicious or intercepted CMP endpoint can crash a CMP client that enforces an expected sender or uses a pinned server certificate...

Astra Linux – Vulnerability in Chromium

In V8, the "out of bounds" reading in Google Chrome before 134.0.6998.88 allowed a remote attacker to perform out-of-bound memory access through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Thunderbird, Firefox

The WebChannel API, which is used to transfer various types of information between processes, did not check the identity of the sender. Instead, it accepted the identity of the sender without verification. This could lead to privilege escalation attacks. This vulnerability has been fixed in Firef...

Astra Linux – Vulnerability in Firefox, Thunderbird

When segmenting specially crafted text, segmentation may corrupt memory, leading to a potentially exploitable crash. This vulnerability has been fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...

Astra Linux – Vulnerability in Thunderbird, Firefox

When using Alt-Svc, ALPN failed to properly validate certificates when the original server was redirecting to an insecure site. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 133 and Thunderbird 133. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 134 and Thunderbird...

Astra Linux – Vulnerability in Firefox

Memory safety bugs exist in Firefox 134 and Thunderbird 134. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability has been fixed in Firefox 135 and Thunderbird...

Security Bulletin: This Power System update is being released to address CVE-2026-15961

Summary IBM PowerVM could allow a local attacker to obtain sensitive information or cause a denial of service due to improper control of format strings. Vulnerability Details CVEID:CVE-2026-15961 DESCRIPTION: IBM PowerVM could allow a local attacker to obtain sensitive information or cause a deni...

CLSA-2026-1775781183 TuxCare security update for 137 packages (1 CVE)

TuxCare rebuilt 137 packages to address 1 CVE. Fixed in 7.14.8-tuxcare.1...

RHSA-2026:28750 Red Hat Security Advisory: kpatch-patch-5_14_0-284_117_1, kpatch-patch-5_14_0-284_134_1, kpatch-patch-5_14_0-284_148_1, kpatch-patch-5_14_0-284_158_1, and kpatch-patch-5_14_0-284_172_1 security update

Bulletin has no description...

CVE-2025-38715

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2025-38695

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

CVE-2019-14199

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16...

CVE-2025-39724

creationtimestamp| type| source ---|---|--- 2026-05-14 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-10...

Format String Vulnerability in CAPWAP fast-failover mode

...

MiracleLinux 4 : logrotate-3.7.8-12.AXS4.1 (AXSA:2011-134:01)

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2011-134:01 advisory. The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for th...