Rocky Linux 9.6 [CIQ] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ciqsa-2026_1300)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261300 advisory. This advisory aggregates security fixes for the vim SRPM in CIQ LTS 9.6. It addresses 3 CVEs: CVE-2025-53905, CVE-2025-53906, CVE-2026-25749. Tenable has...

CentOS Linux 7.9 [CIQ] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ciqsa-2026_1323)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20261323 advisory. This advisory aggregates security fixes for the vim SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2026-25749. Tenable has extracted the preceding...

AlmaLinux 9.6 [TuxCare] Security Update: go-filesystem / go-rpm-macros / go-rpm-templates / go-srpm-macros (ALMALINUX9.6:CLSA-2026:1776966842)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776966842 advisory. - url.Parse insufficiently validated the host/authority component and accepted some invalid URLs. CVE-2026-25679 Note that Nessus has not...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1767712744)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1767712744 advisory. - When switching to other buffers using the :all command and visual mode still being active, this may cause a heap-buffer overflow...

CVE-2025-6019-Exploitation

CVE-2025-6019 – UDisks2 ResizeFilesystem 취약점 교육적 재현 이 저장소는 통제된 실험실 환경Ubuntu VM, 비프로덕션에서 수행된 CVE-2025-6019의 교육적 재현을 문서화합니다. 🛡️ 보안 공지 이 연구는 샌드박스 Ubuntu 환경에서 CVE-2025-6019를 재현하여 UDisks2 취약점의 근본 원인과 완화 방법을 분석합니다. 모든 결과는 책임감 있게 공유되며 인식 제고와 패치 채택을 지원하기 위한 것입니다. 공급업체 또는 유지관리자라면 시스템에 최신 보안 업데이트가 적용되어 있는지...

cve-2021-41773-exploration

개요 CVE-2021-41773은 2021년 10월 Apache HTTP Server 2.4.49에서 발견된 경로 탐색path traversal 취약점입니다. 근본 원인은 요청된 경로가 웹 루트 내에 유지되는지 확인하기 전에 URL에 포함된 점dot 시퀀스를 제대로 정규화하지 못한 데 있었습니다. 이 취약점으로 인해 공격자는 웹 루트를 벗어나 서버 파일시스템의 모든 파일에 접근할 수 있었으며, 일부 경우에는 원격 코드 실행까지 권한이 상승할 수 있었습니다. 이 탐구에서 시연된 2가지 공격 벡터 경로 탐색: 파일시스템에서 임의의...

CVE-2026-102143

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...

CVE-2026-102113

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

EUVD-2024-55778

Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...

CVE-2026-102113 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102113

A privilege escalation vulnerability exists in Kiteworks where an attacker with local code execution as an unprivileged backend service account on the appliance can escalate to root privileges. The root cause is a privileged routine that fails to safely handle a filesystem path influenced by the ...

CVE-2026-102113 Kiteworks Core Local Privilege Escalation

A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on the appliance to escalate to root. A privileged routine did not safely handle a filesystem path that the lower-privileged account could...

CVE-2026-102143

The Kiteworks Email Protection Gateway contains a vulnerability where an unauthenticated attacker can write a file with attacker-controlled content to the appliance filesystem. The root cause is an administrative upload handler that fails to properly authenticate requests. While this allows for u...

CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...

CVE-2026-102143 Kiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type

An unauthenticated attacker could cause a file with attacker-controlled content to be written to the appliance filesystem through an administrative upload handler that did not properly authenticate the request. This did not by itself result in code execution, which would require a separate...

CLEANSTART-2024-XJ51471 flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers

Security vulnerability affects the buildah package. A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers...

CVE-2026-102252

A flaw was found in OSV-SCALIBR. This vulnerability allows an attacker who controls the scan target to write arbitrary files to the host system. When scanning a crafted Virtual Machine Disk VMDK image, insufficient validation of archive path entries in the embedded filesystem extractor allows...

CVE-2026-88899

CVE-2026-88899 - Knowns 0.30.0 未認証ヘッダーインジェクションによりAIエージェントがホストファイルシステムへ無制限にアクセス可能 概要 Knownsの組み込みOpenCode...

Malicious code in imgbundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e14218599b46d143fa8e150156864d14d58c327bd8a8816221ac4e8c5cc99350 The package advertises itself as an image bundler, but index.js performs no image bundling. On require, a top-level IIFE reads an AES-256-CBC-encrypt...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1774607944)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1774607944 advisory. - Vim is an open source, command line text editor. Prior to version 9.1.2132, a heap buffer overflow vulnerability exists in Vim's t...