4927 matches found
CVE-2026-16713
IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-16713, a security misconfiguration where the embedded Node.js server binds to an unrestricted IP address, enabling a remote attacker on the network to obtain sensitive information. The IBM bulletin (and NVD entry) describe this as an i...
CVE-2026-16713
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
CVE-2026-16713 IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
EUVD-2026-58366
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
MINI-2GCG-J3RF-FPWF
Bulletin has no description...
EUVD-2026-57965
Unauthenticated Cross Site Scripting XSS in Knowledge Base for Documentation, FAQs with AI Assistance = 17.211.0 versions...
Security Bulletin: IBM Documentation Offline is vulnerable to information disclosure, session forgery and remote code execution
Summary IBM Documentation Offline is a desktop application that bundles an Electron-based viewer and an embedded Node.js web server to serve product documentation locally on the user's workstation. Multiple vulnerabilities have been identified in the embedded server component spanning three...
PT-2026-71852
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...
PT-2026-71851
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs...
PT-2026-71807
IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address...
cyberange
大家好,我就是那个B站里面的用Kali学渗透。本仓库是网络安全渗透测试学习与训练靶场,包含Web漏洞靶场、渗透工具脚本、攻防手册等。内含:邻里圈靶场16+隐藏漏洞,含SQL注入/XSS/命令注入/文件上传/路径遍历等、零依赖渗透脚本、全工具链渗透脚本、PHP/CGI木马、反向Shell、密码破解工具、蜜罐防御系统、Metasploit精简版、Hacker OS一键构建脚本,以及DVWA攻防手册、Kali工具手册、recon-ng手册等学习文档。适合网络安全入门学习和CTF备赛参考。...
CVE-2026-73295
Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest...
CVE-2026-19375
A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...
[SECURITY] Fedora 43 Update: python3.12-3.12.13-6.fc43
Python 3.12 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.12 package provides the "python3.12" executable:...
MiracleLinux 8 : java-21-openjdk-21.0.12.0.8-1.1.el8.ML.1 (AXSA:2026-1475:08)
The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1475:08 advisory. JDK: Enhance TLS certificate handling CVE-2026-46968 JDK: Improve DTLS handshaking CVE-2026-46917 JDK: Enhance JPEG handling CVE-2026-47010 JDK:...
CGA-5MQM-MJ4F-FQ4H
Bulletin has no description...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...
Security update for vifm (important)
openSUSE Security Update: Security update for vifm Announcement ID: openSUSE-SU-2026:0276-1 Rating: important References: 1273413 Cross-References: CVE-2026-8997 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This update for...
Important: Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
The 1.4.3 release of the RHTAS CLIs. For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/redhattrustedartifactsigner/1.4 The RHTAS CLI Stack images for RHTAS 1.4.3...