20 matches found
CVE-2024-26865
creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...
CVE-2025-26865
creationtimestamp| type| source ---|---|--- 2025-03-10 14:38:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7004 2025-03-10 15:40:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljzv7jwmfl2m 2025-03-10 15:51:18+00:00| seen|...
CVE-2025-26865
Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz. This issue affects Apache OFBiz: from 18.12.17 before 18.12.18. It's a regression between 18.12.17 and 18.12.18. In case you use something like that, which is not recommended! For security, only...
CVE-2025-26865
Apache OFBiz is vulnerable to Server-Side Template Injection (SSTI) in the FreeMarker template engine due to a regression between versions 18.12.17 and 18.12.18 . Specifically, the vulnerability affects the "ecommerce" plugin , reopening a previously fixed issue (CVE-2022-25813). If successfully ...
Linux Distros Unpatched Vulnerability : CVE-2024-26865
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of...
AZL-54972 CVE-2024-26865 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2024-26865 rds: tcp: Fix use-after-free of net in reqsk_timer_handler().
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2024-26865
In the Linux kernel, the following vulnerability has been resolved: rds: tcp: Fix use-after-free of net in reqsktimerhandler. syzkaller reported a warning of netns tracker 0 followed by KASAN splat 1 and another ref tracker warning 1. syzkaller could not find a repro, but in the log, the only...
CVE-2023-26865
creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:43+00:00| seen| https://t.me/cibsecurity/62750...
CVE-2023-26865
CVE-2023-26865 describes a SQL injection in PrestaShop bdroppy before or at v2.2.12, exploitable via the BdroppyCronModuleFrontController::importProducts component to gain remote privileges. Affected software is PrestaShop with the bdroppy module (versions ≤ 2.2.12). The root cause is improper ha...
CVE-2022-26865
creationtimestamp| type| source ---|---|--- 2022-05-26 20:14:22+00:00| seen| https://t.me/cibsecurity/43408...
CVE-2022-26865
Dell SupportAssist OS Recovery is affected by an Authentication Bypass in versions before 5.5.2. An unauthenticated attacker with physical access can bypass OS Recovery authentication and run arbitrary code as Administrator. Root cause: bypass of OS Recovery authentication. Impact: full administr...
CVE-2021-26865
Windows Container Execution Agent Elevation of Privilege Vulnerability...
CVE-2021-26865 Windows Container Execution Agent Elevation of Privilege Vulnerability
...
CVE-2021-26865
CVE-2021-26865 is discussed in depth in connected materials (Project Zero/blog post and MSRC notes). The Windows Container Execution Agent elevation issue was demonstrated to enable container escapes from a non‑administrative container user by abusing server/application silos and object manager r...
CVE-2021-26865
creationtimestamp| type| source ---|---|--- 2021-03-11 06:06:55+00:00| exploited| https://t.me/CyberSecurityTechnologies/2835 2021-03-11 18:54:27+00:00| seen| https://t.me/cibsecurity/24760 2021-04-02 11:01:09+00:00| seen| https://t.me/CyberSecurityTechnologies/3038 2026-09-01 17:00:55+00:00| see...
KB5000808: Windows 10 Version 1909 March 2021 Security Update
The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...
KB5000822: Windows 10 Version 1809 and Windows Server 2019 March 2021 Security Update
The remote Windows host is missing security update 5000822. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24095, CVE-2021-26860, CVE-2021-26862,...