external_libcap-Android10_r33_CVE-2023-2603

Ceci est une bibliothèque pour obtenir et définir les capacités POSIX.1e anciennement POSIX 6 du brouillon 15. Cette bibliothèque n'aurait pas été possible sans l'aide de Aleph1, Roland Buresund et Andrew Main, Alexander Kjeldaas. Plus d'informations sur les capacités dans le noyau Linux peuvent...

PT-2026-103954

Name of the Vulnerable Software and Affected Versions Capacitor versions prior to 6.2.2 Capacitor versions prior to 7.6.9 Capacitor versions prior to 8.3.5 Capacitor versions prior to 8.4.3 Capacitor versions prior to 8.5.1 Description The Android and iOS WebView navigation guard validates the ho...

Rocky Linux 8 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2024_1510)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241510 advisory. nodejs: reading unprocessed HTTP request with unbounded chunk extension allows DoS attacks CVE-2024-22019 nodejs: vulnerable to timing variant of the...

Rocky Linux 9 [CIQ] Security Update: runc / runc-debuginfo / runc-debugsource (crlsa-2022_8090)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20228090 advisory. runc: incorrect handling of inheritable capabilities CVE-2022-29162 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CVE-2023-0386_POC

Équipe CVE-MD Ce dépôt fournit une preuve de concept pour CVE-2023-0386 : https://nvd.nist.gov/vuln/detail/CVE-2023-0386 Membres de l'équipe : Bǎnicǎ Dragoș-Marius et Borsos Matheas-Roland Voici la vidéo : https://www.youtube.com/watch?v=Ikux1rjIYP0 CVE-2023-0386 — Escalade de privilèges locale...

OverlayFS---CVE-2021-3493

En résumé Découvrez comment une vulnérabilité dans OverlayFS permet aux utilisateurs locaux sous Ubuntu d'obtenir les privilèges root. Résumé de la vulnérabilité Un problème spécifique à Ubuntu dans le système de fichiers overlayfs du noyau Linux, où il ne validait pas correctement l'application...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS - Élévation de privilèges locale Versions affectées Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilisation gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Problème spécifique à Ubuntu dans le système de fichiers...

CVE-2021-3493

CVE-2021-3493 — Élévation de privilèges locale Ubuntu OverlayFS Une preuve de concept fonctionnelle pour CVE-2021-3493 , une vulnérabilité d'élévation de privilèges locale dans l'implémentation OverlayFS du noyau Ubuntu. Un utilisateur non privilégié peut monter un système de fichiers overlay dan...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Élévation de privilèges locale Versions affectées Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Utilisation gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Problème spécifique à Ubuntu dans le système de fichiers...

Astra Linux – Vulnerability in Chromium

Improper privilege management in Regional Capabilities in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted Chrome extension. Chromium security severity: Medium...

PT-2026-98362

Name of the Vulnerable Software and Affected Versions Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress versions prior to 4.8.7 Description An issue exists due to missing permission enforcement on the publicly accessible REST route POST...

CVE-2026-94487

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

CVE-2026-94487

The PublishPress Capabilities WordPress plugin, in versions

CVE-2026-94487 WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

CVE-2026-94487 WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

EUVD-2026-85480

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

WordPress PublishPress Capabilities plugin <= 2.50.1 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Intrudify in WordPress Plugin PublishPress Capabilities versions = 2.50.1...

CVE-2026-94487: Cross-Site Request Forgery (CSRF)

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

PT-2026-97465

Unauthenticated Cross Site Request Forgery CSRF in PublishPress Capabilities = 2.50.1 versions...

GHSA-XP3C-3JW3-4VCR OpenBao Skips Stricter Deny Policy for LIST operations

Impact When a policy operator has written capabilities = "deny" on a path with a trailing wildcard but allowed a broader list operation e.g., a deny on secrets/metadata/restricted/ but allowed list on secrets/metadata/, OpenBao would incorrectly allow the operation. This did not impact other...