CVE-2026-72711

CVE-2026-72711 is a kernel soundness flaw in Lean 4 before 4.32.2. The function environment::add_opaque omits the check_no_metavar_no_fvar closure check that the definition and theorem paths perform. A metaprogram can exploit a stale entry in the type checker's inference cache to submit an opaque...

CVE-2026-72711 Lean 4 before 4.32.2 Kernel Accepts Opaque Declaration With an Unbound Free Variable

The Lean 4 kernel does not check that the body of an opaque declaration is closed. environment::addopaque omits the checknometavarnofvar call that the definition and theorem paths perform, so a value containing a free variable that is absent from the local context is not rejected outright. A...

lean-cve-poc

CVE-2026-72844: Bug de Solidez do Kernel do Lean 4 Provando0 = 1 sem axiomas por meio de bypass na validação de projeção de indutivos aninhados...

CVE-2024-37888

CVE-2024-37888 Dieses Repository dokumentiert Schwachstellendetails und Exploit für CVE-2024-37888, entdeckt und gemeldet von mir selbst. Metriken CWE-79: Unzureichende Neutralisierung von Eingaben während der Generierung von Webseiten 'Cross-Site-Scripting' CVSS: 6.1 MITTEL Schwachstellenübersic...

grafana-CVE-2018-15727

Exploit di Grafana CVE-2018-15727 Installazione root@kitploit: $ go get github.com/u238/grafana-CVE-2018-15727 Utilizzo root@kitploit: $ source go env $ $GOPATH/bin/grafana-CVE-2018-15727 ldapadmin i delete the grafanasess cookie from your browser session i set following cookies in you browser: f...

picohaxx

sorgente in arrivo™ picohaxx Exploit open source del kernel per dispositivi Pico 4 basato su cve-2023-33107 root@kitploit: Usage: picohaxx options -- GENERAL OPTIONS: -help Show this help menu -v Print build timestamp and exit -unroot unroot adbd -nobash once adb root is unlocked, the default is ...

r2d2

r2d2 Plugin GPT-4 para radare2 Introdução Este é um plugin para radare2 que usa GPT-4 para permitir que o GPT-4 emita comandos r2 e interprete a saída. https://github.com/dnakov/r2d2/assets/3777433/4bc7b211-bccc-4b04-9350-6bfca8989edb...

CVE-2026-72844

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

EUVD-2026-63487

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

CVE-2026-72844

CVE-2026-72844 is a kernel soundness break in Lean 4 , the theorem prover. The root cause is a missing type check in environment::add_inductive (src/kernel/inductive.cpp): nested inductive applications replaced by auxiliary types had their parametric arguments unchecked, and the kernel did not ve...

CVE-2026-72844 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections

The Lean 4 kernel does not verify that the structure named in a projection expression matches the type of the value being projected, and environment::addinductive in src/kernel/inductive.cpp did not type check the nested inductive applications that are replaced by auxiliary types, so their...

PT-2026-79074

Name of the Vulnerable Software and Affected Versions Lean 4 affected versions not specified Description The kernel fails to verify that the structure named in a projection expression matches the type of the value being projected. Additionally, the environment::add inductive function in...

Virtuozzo Hybrid Infrastructure 7.1 Hotfix 4 (7.1.0-205)

This update provides security fixes. Vulnerability id: VSTOR-130225 A security fix for CVE-2026-31431. Vulnerability id: VSTOR-130767 Security fixes for CVE-2026-43284 and CVE-2026-43500. Vulnerability id: VSTOR-131868 A security fix for CVE-2026-46333. Vulnerability id: VSTOR-132074 A security f...

CVE-2026-58085

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

CVE-2026-58085 Missing MAC validation in wg(4) packet decryption

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

EUVD-2026-62339

After dispatching a decrypt operation to OCF and receiving the result, the wg4 driver failed to check whether the MAC verification step succeeded. The driver thus silently accepted packets with an invalid Poly1305 authentication tag. A remote attacker who can send UDP packets to a WireGuard...

TencentOS Server 4: mrtg (TSSA-2026:0844)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0844 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

RHCOS 4 : OpenShift Container Platform 4.20.34 (RHSA-2026:54580)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:54580 advisory. - golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing CVE-2026-3982...

CVE-2026-17350

A flaw was found in pgAdmin 4. In SERVER mode, an authenticated user who has been explicitly denied access to a specific tool by an administrator could still bypass this restriction. This is due to inconsistent enforcement of the per-tool permission system, where backend routes and Socket.IO...