452459 matches found
cups-2.4.16-lpe
CUPS 2.4.16 — 本地权限提升 CVE-2026-34990 📋 概述 CUPS 2.4.16 包含一个本地权限提升 漏洞 （同时被追踪为 GHSA-c54j-2vqw-wpwp ）。 漏洞详情 1. 全局可写套接字 — /run/cups/cups.sock 全局可写， 允许任何本地用户向 CUPS 守护进程（以 root 身份运行） 发送 IPP 请求。 2. 本地令牌泄露 — 通过将 device-uri 指向攻击者控制的 IPP 服务器，可以滥用 CUPS-Create-Local-Printer 来 泄露 Local 授权令牌。 3. 任意文件写入 —...
CVE-2026-34990-CUPS-LPE-PoC
CVE-2026-34990 | CUPS 本地权限提升 PoC 针对 CVE-2026-34990 的通用概念验证，这是一个影响 CUPS 2.4.16 的本地权限提升漏洞。 该漏洞利用演示了本地非特权用户如何滥用 CUPS 本地认证和打印机配置行为，以 root 身份获得任意文件写入权限并提升权限。 漏洞信息 CVE： CVE-2026-34990 组件： CUPS 测试版本： CUPS 2.4.16 类型： 本地权限提升 影响： 以 root 身份任意文件写入 修复版本： CUPS 2.4.17 漏洞致谢 CVE-2026-34990 最初由以下人员报告： Asim Viladi...
[SECURITY] [DSA 6549-1] xz-utils security update
------------------------------------------------------------------------- Debian Security Advisory DSA-6549-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 07, 2026 https://www.debian.org/security/faq -...
EUVD-2026-92621
Ghost: Remote Code Execution via Bookmark Card Images...
EUVD-2026-92804
Docling has arbitrary file read/write and command execution when shell-escape is enabled when rendering untrusted TikZ with the opt-in Tectonic engine...
GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...
EUVD-2026-92788
Langflow: OS command injection RCE via arbitrary command in MCP stdio server configuration...
watchTowr-vs-Atlassian-CVE-2026-21589
CVE-2026-21589 - Jira/Confluence/Bitbucket 任意文件读取 CVE-2026-21589 - Jira/Confluence/Bitbucket 任意文件读取 实际检测 Detection Artifact Generator 尝试检查目标是否存在 CVE-2026-21589 漏洞。检测针对以下产品实现： Atlassian Jira Atlassian Confluence Atlassian Bitbucket 你需要提供以下输入： -H - 目标主机。 针对存在漏洞的 Jira 实例的示例运行： $ python3...
GHSA-347Q-26QQ-H2P6 Ghost: Stored XSS via Bookmark Card Images
Impact When creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin...
EUVD-2026-92761
Ghost: Stored XSS via Bookmark Card Images...
Ghost: Stored XSS via Bookmark Card Images
Impact When creating a bookmark card, Ghost could store non-image files fetched from an external website as bookmark icons or thumbnails. This allowed any staff user, including Contributors, to host arbitrary HTML on the site's domain, possibly resulting in compromise of other staff users' admin...
EUVD-2026-92767
Ghost: Remote Code Execution via Theme Translation Files...
GHSA-5JJJ-9XC3-RM56 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Summary hydra-optuna-sweeper accepted a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolved it with the lower-level hydra.utils.getmethod API, and later invoked the returned callable. Hydra's object-lookup helpers intentionally trust their input and do not apply the...
CVE-2026-78030
A flaw was found in Perl DBI's bundled DBD::DBM driver. This vulnerability allows arbitrary code execution because unvalidated connection attributes, such as dbmtype and dbmmldbm, are passed directly to Perl's module loader without verification. An attacker who can influence database connection...
CVE-2026-106441
A flaw was found in hydra-core. An attacker who supplies or controls a malicious logging configuration can trigger arbitrary code execution by specifying unauthorized Python classes or factory functions. Because Hydra passes logging configuration directly to Python's logging system without...
CVE-2026-42616
A flaw was found in NTFS-3G. An attacker can trigger a heap buffer overflow in the ntfscat utility by providing a specially crafted NTFS filesystem image. When the utility attempts to read a file from the malicious image, heap memory is corrupted, which can lead to a Denial of Service DoS crash o...
Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System
Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD...
GHSA-PQ68-RVW4-XP4R vm2 contains a sandbox escape vulnerability
vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits childprocess despite blocking other host-spawning modules. Attackers can require childprocess and execute arbitrary commands on the host system when NodeVM is configured with...
vm2 contains a sandbox escape vulnerability
vm2 NodeVM versions before 3.12.1 contain a sandbox escape vulnerability where the DANGEROUSBUILTINS denylist omits childprocess despite blocking other host-spawning modules. Attackers can require childprocess and execute arbitrary commands on the host system when NodeVM is configured with...