437 matches found
CVE-2025-32463
CVE-2025-32463 検出フレームワーク sudo chroot 権限昇格の脆弱性 CVE-2025-32463 を狙った悪用試行を識別するための包括的なセキュリティ監視・検出フレームワークです。このプロジェクトは、高度な脅威検出手法、インシデント対応能力、および防御セキュリティエンジニアリングを示しています。 🔍 概要 CVE-2025-32463 は、sudo バージョン 1.9.14 から 1.9.17 における重大な権限昇格の脆弱性であり、--chroot オプション使用時に /etc/nsswitch.conf を操作することでローカルユーザーが root...
CVE-2026-66840
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497. Sensitive system information may be leaked...
Langflow < 1.3.0 - Remote Code Execution via validate_code() exec()
Langflow contains a remote code execution caused by inclusion of functionality from untrusted control sphere in the execglobals parameter at the validate endpoint, letting remote attackers execute arbitrary code as root, exploit requires no authentication. id: CVE-2026-0770 info: name: Langflow...
CVE-2026-4255
CVE-2026-4255 Thermalright TR-VISION HOME DLL Side-Loading – Élévation de privilèges Sévérité : HAUTE CVSS 8.4 CWE : CWE-829 Inclusion de fonctionnalités provenant d’une sphère de contrôle non fiable Publiée : 16/03/2026 CNA : Toreon Versions concernées : Thermalright TR-VISION HOME ≤ 2.0.5 Windo...
CVE-2026-58569
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...
EUVD-2026-69230
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...
CVE-2026-58569
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could exploit this to execute arbitrary code with root privileges , resulting in high impact to confidentiality, integrity, and availability with a cha...
CVE-2026-58569
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary code with root privileges...
BIT-GITLAB-2026-18252 Inclusion of Functionality from Untrusted Control Sphere in GitLab
GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude...
CVE-2026-62902
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data. Mitigation No mitigation is needed. All...
CVE-2026-67267
Dell Command Update (DCU) versions prior to 5.7.1 are affected by an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A low-privileged attacker with local access can exploit this flaw to achieve information disclosure , with no user interaction required. T...
PT-2026-78641
Name of the Vulnerable Software and Affected Versions Ozols Grupa OZOLS versions prior to 1.1.1233 Description The software contains a flaw in its automatic update channel, specifically affecting the OzolsSQL client update path, the serv update.vbs file, and the update SQL Server Agent job using...
Linux Distros Unpatched Vulnerability : CVE-2026-62902
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-62902 Note tha...
PT-2026-73268
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-73278
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
dotnet: .NET: Information Disclosure Vulnerability
A flaw was found in .NET. This vulnerability allows an unauthorized attacker to disclose sensitive information over a network. The issue arises from the inclusion of functionality from an untrusted control sphere, which can be exploited to reveal data...
Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A specially crafted document...
GHSA-9MRH-PW7C-9MQM Microsoft Security Advisory CVE-2026-62902 – .NET Information Disclosure Vulnerability
Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A specially crafted document...