452246 matches found
PT-2026-107788
A memory buffer overflow vulnerability exists in the internal diagnostic and route validation routines used by the Fabric Shortest Path First FSPF protocol component of Brocade Fabric OS versions before 10.0.1. While this code path is part of internal diagnostic functionality and is not directly...
PT-2026-107769
Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads such as device configuration attributes or port mapping requests the REST API service fails to properly validate...
PT-2026-107776
A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...
PT-2026-107796
An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file pa...
Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
Summary Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access. Vulnerability Details CVEID:CVE-2026-78401 DESCRIPTION: IBM Verify Identity Access could allow a remote unauthenticated attacker to execute arbitrary code on the system due to the...
Security Bulletin: Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...
CVE-2024-42009
CVE-2024-42009 – Roundcube 저장형 XSS Docker PoC 📌 개요 이 저장소는 Roundcube Webmail에서 발생하는 CVE-2024-42009저장형 크로스 사이트 스크립팅, XSS에 대한 동작하는 개념 증명PoC을 제공합니다. 이 취약점은 부적절한 HTML 살균sanitization 후 안전하지 않은 속성 재처리로 인해 발생하며, 공격자가 조작된 HTML 이메일을 통해 악성 이벤트 핸들러를 주입할 수 있게 합니다. ⚠️ 영향을 받는 버전 Roundcube ≤ 1.5.7 Roundcube ≤...
CVE-2026-105816
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...
CVE-2026-67401
CVE-2026-67401 — cPanel/WHM EmailTrack SQL 인젝션 → 루트 RCE CVE-2026-67401 에 대한 개념 증명PoC으로, cPanel & WHM의 EmailTrack 기능에 존재하는 치명적인 SQL 인젝션 취약점입니다. 메일 관련 권한을 가진 인증된 사용자가 임의 파일을 쓰고 root 권한으로 코드를 실행할 수 있습니다. 발견자: Ali Mustafa 공개일: 2026년 9월 8일 구성 요소: EmailTrack 이메일 전송 로깅 / 추적 영향받는 버전 수정된 빌드 이하 버전이 취약합니다...
CVE-2025-67644-LangGraph-3.0.1-SQLite-Checkpoint-SQL-Injection
CVE-2025-67644 PoC – SQL-инъекция в LangGraph SQLite Checkpoint CVE-2025-67644 — это уязвимость SQL-инъекции CWE-89 в пакете langgraph-checkpoint-sqlite часть экосистемы LangGraph / LangChain. Она позволяет атакующему внедрять произвольный SQL через неэкранированные ключи фильтра метаданных ,...
CVE-2026-105816
Vault and Vault Enterprise are vulnerable to arbitrary code execution on the host because the software does not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. If Vault utilizes Shamir seals and an external plugin directory , a pri...
CVE-2026-105816 Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Raft...
Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots
Summary Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault uses Shamir seals and has an external plugin directory configured, a privileged operator able to restore an Integrated Storage Ra...
cups-2.4.16-lpe
CUPS 2.4.16 — 로컬 권한 상승 CVE-2026-34990 📋 요약 CUPS 2.4.16에는 로컬 권한 상승 취약점이 포함되어 있습니다 GHSA-c54j-2vqw-wpwp 로도 추적됩니다. 취약점 1. 전 세계 쓰기 가능 소켓 — /run/cups/cups.sock이 전 세계 쓰기 가능하여, 모든 로컬 사용자가 root 로 실행 중인 CUPS 데몬에 IPP 요청을 보낼 수 있습니다. 2. 로컬 토큰 유출 — CUPS-Create-Local-Printer를 악용하여 device-uri를 공격자가 제어하는 IPP 서버로...
CVE-2026-34990-CUPS-LPE-PoC
CVE-2026-34990 | CUPS 로컬 권한 상승 PoC CUPS 2.4.16에 영향을 미치는 로컬 권한 상승 취약점인 CVE-2026-34990 에 대한 범용 개념 증명proof-of-concept입니다. 이 익스플로잇은 로컬의 비특권 사용자가 CUPS의 로컬 인증 및 프린터 구성 동작을 악용하여 root 권한으로 임의 파일을 쓰고 권한을 상승시킬 수 있는 방법을 보여줍니다. 취약점 CVE: CVE-2026-34990 구성 요소: CUPS 테스트 버전: CUPS 2.4.16 유형: 로컬 권한 상승 영향: root 권한으...
[SECURITY] [DSA 6549-1] xz-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2026 https://www.debian.org/security/faq -...
EUVD-2026-92621
Ghost: Remote Code Execution via Bookmark Card Images...
GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...