93147 matches found
CLEANSTART-2026-SZ70043 Security fix for CVE-2020-36222 applied in: openldap 2.4.57-r0
Security vulnerability affects the openldap package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AK78825 Security fix for CVE-2020-21913 applied in: icu 66.1-r0
Security vulnerability affects the icu package. This issue is resolved in later releases. See references for vulnerability details...
Dubbo-deserialization
Apache Dubbo Deserialization Vulnerability Research This repository contains research materials, proof-of-concept code, and exploitation tools related to Apache Dubbo deserialization vulnerabilities, primarily focusing on CVE-2020-1948. Repository Structure Directories...
Astra Linux – Vulnerability in python-urllib3
urllib3 before version 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest. NOTE: this is similar to CVE-2020-26116...
Astra Linux – Vulnerability in sane-backends
A NULL pointer dereferencing in SANE backends before version 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, GHSL-2020-079...
Astra Linux – Vulnerability in sane-backends
A NULL pointer dereferencing in the saneiepsonnetread function in SANE backends before version 1.0.30 allows a malicious device connected to the same local network as the victim to cause a denial of service, known as GHSL-2020-075...
Astra Linux – Vulnerability in Apache Log4j1.2
CVE-2020-9493 identified a deserialization issue present in Apache Chainsaw. Prior to Chainsaw V2.0, Chainsaw was a component of Apache Log4j 1.2.x, and the same issue still exists there...
Astra Linux – Vulnerability in sane-backends
A out-of-bounds read in SANE backends before version 1.0.30 may allow a malicious device connected to the same local network as the victim to read important information, such as the ASLR offsets of the program, also known as GHSL-2020-083...
Astra Linux – Vulnerability in php-pear
In ArchiveTar version 1.4.11, the Tar.php script allows write operations involving directory traversal, due to insufficient checking of symbolic links. This issue is related to CVE-2020-28948...
Astra Linux – Vulnerability in Xen
A issue was discovered in Xen through version 4.11.x, allowing users of x86 Intel HVM guest operating systems to obtain unintended read/write DMA access. This could potentially lead to a denial of service host operating system crash or privilege escalation. This issue arises because a backport...
Astra Linux – Vulnerability in Ceph
A flaw was discovered in Red Hat Ceph Storage 4, within the Dashboard component. In response to CVE-2020-27839, the JWT token was moved from localStorage to an httpOnly cookie. However, token cookies are used in the body of the HTTP response for documentation purposes, which again exposes them to...
Astra Linux – Vulnerability in PHP 7.3
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23, and 7.4.x below 7.4.11, when PHP processes incoming HTTP cookie values, the cookie names are url-decoded. This may result in cookies with prefixes like Host being confused with cookies that are decoded with such prefixes. As a consequence,...
Astra Linux – Vulnerability in Tomcat9
The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61, or 7.0.0 to 7.0.107, the Tomcat instance was still vulnerable to CVE-2020-9494, even when using a configuration edge case that was highly unlikely to be used. It should be...
CVE-2020-25749
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:11+00:00| seen| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM 2026-09-15 00:00:24+00:00| published-proof-of-concept| Telegram/SWXpTbFDgqk-a1sBSyz4gpK1bNcdSIfJKm4SIv87MwvEOM...
CVE-2020-5254
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:06+00:00| seen| Telegram/GzyKsU-CxmNA-7iUVuYxhuK-1O2CwrIjduDN5C54bM7TtfM 2026-09-15 00:00:29+00:00| published-proof-of-concept| Telegram/GzyKsU-CxmNA-7iUVuYxhuK-1O2CwrIjduDN5C54bM7TtfM...
CVE-2020-37168
creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:05+00:00| seen| https://t.me/shimiscyberworld/1455 2026-09-13 00:00:56+00:00| seen| https://t.me/shimiscyberworld/1455...
ROOT-APP-NPM-CVE-2020-7774 CVE-2020-7774 in y18n - Patched by Root
Root has patched CVE-2020-7774 in the y18n package for Root:npm. Multiple fixed versions available...
SaltStack <=3002 - Shell Injection
SaltStack Salt through 3002 allows an unauthenticated user with network access to the Salt API to use shell injections to run code on the Salt-API using the SSH client. id: CVE-2020-16846 info: name: SaltStack =3003 to mitigate this vulnerability. reference: -...
Apache Airflow <=1.10.10 - Remote Code Execution
Apache Airflow versions 1.10.10 and below are vulnerable to remote code/command injection vulnerabilities in one of the example DAGs shipped with Airflow. This could allow any authenticated user to run arbitrary commands as the user running airflow worker/scheduler depending on the executor in us...