The vulnerability of the channels/drdynvc/client/drdynvc_main.c file in the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the channels/drdynvc/client/drdynvcmain.c file in the RDP client FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

The vulnerability of the extra/mariabackup/xbstream.cc file of the MariaDB database management system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the extra/mariabackup/xbstream.cc file of the MariaDB database management system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20261005-73-0138

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261005-73-0025

The vulnerability in rsync is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled. With malicious Android applications abusing the API serving as the main conduit for malware and...

The vulnerability of the UpdatePullRequest() function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea allows a attacker to compromise the integrity and accessibility of the protected information.

The vulnerability of the UpdatePullRequest function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and...

CVE-2022-26726-POC

CVE-2022-26726 Versions concernées En tant qu'étudiant, j'ai un accès limité aux appareils sur lesquels je peux tester cette vulnérabilité. Les versions que j'ai testées jusqu'à présent sont MacOS 12.3.1, MacOS 12.3, MacOS 12.0, MacOS 10.15.7 et MacOS 11.6.1. La vulnérabilité fonctionne sur toute...

CVE-2026-2413

CVE-2026-2413 Ally – Web Accessibility & Usability = 4.0.3 - Unauthenticated SQL Injection via URL Path Description The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3. This is due to insufficien...

CVE-2026-2413-POC

CVE-2026-2413-POC WordPress용 Ally – Web Accessibility & Usability 플러그인은 4.0.3을 포함한 모든 버전에서 URL 경로를 통한 SQL 인젝션에 취약합니다. 이는 getglobalremediations 메서드에서 사용자 제공 URL 매개변수에 대한 이스케이프 처리가 충분하지 않기 때문이며, 해당 매개변수는 SQL 컨텍스트에 대한 적절한 삭제샌니타이제이션 없이 SQL JOIN 절에 직접 연결됩니다. URL 안전을 위해 escurlraw가 적용되지만, 이는 SQL...

CLEANSTART-2024-UI36748 Use after free in Accessibility in Google Chrome prior to 91

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 91...

CLEANSTART-2024-AL06314 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

CLEANSTART-2024-NZ14344 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

Rocky Linux 8.6 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (ciqsa-2026_0065)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260065 advisory. This advisory aggregates security fixes for the java-1.8.0-openjdk SRPM in CIQ LTS 8.6. It addresses 16 CVEs: CVE-2024-21011, CVE-2024-21131,...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1753982295)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1753982295 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

"I'm Trying Not to Get Hacked:" How Adults with Intellectual and Developmental Disabilities Navigate Security and Privacy Notifications

Security and privacy notifications, such as login alerts, spam email warnings, and cookie consent requests, play a critical role in shaping users' responses to digital risks. Yet most notifications overlook cognitive accessibility, limiting their effectiveness for people with intellectual and...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1749481242)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1749481242 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1753374348)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1753374348 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

CentOS Linux 8.4 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2025:1745587859)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2025:1745587859 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...

Rocky Linux 8 [CIQ] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (crlsa-2026_9683)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20269683 advisory. JDK: Enhance crypto algorithm support CVE-2026-22007 JDK: Improve Kerberos credentialing CVE-2026-22013 JDK: Enhance Path Factories Redux CVE-2026-22016 JD...

CentOS Linux 8.5 [TuxCare] Security Update: java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2025:1745588191)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2025:1745588191 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...