CVE-2026-82547

Linux Foundation Magma 1.9.0 contains an improper authentication vulnerability in the Registration Complete Message Handler (file tasks/amf/amf_fsm.cpp, unknown function). A remote attacker with no prior privileges and no user interaction can manipulate the handler to bypass authentication, resul...

security-research

Security Research Vulnerabilities I have reported to the Apache Software Foundation, disclosed through the ASF security process. 46 CVEs across 15 projects , 2023 to 2026. Where a public reproducer exists it is linked. Each one is a minimal, self-contained project that demonstrates the issue and...

CVE-2019-17638-Jetty

JETTY Il progetto Jetty è un server HTTP 100% Java, un client HTTP e un contenitore di servlet della Eclipse Foundation http://www.eclipse.org/jetty/ Jetty è open source ed è distribuito con doppia licenza: Apache 2.0 e Eclipse Public License 1.0. Puoi scegliere una qualsiasi delle due licenze...

asf__tapestry-5_CVE-2019-0207_5-4-4

Dieses Repository hat keine README-Datei...

PT-2026-83517

Name of the Vulnerable Software and Affected Versions Linux Foundation Magma version 1.9.0 Description An issue exists in the SecurityModeComplete Handler component where an unknown function fails to properly validate the integrity check value. This flaw allows a remote attacker to manipulate the...

anteater

Anteater - CI/CD Gate Check Framework Description Anteater is an open framework to prevent the unwanted merging of nominated strings, filenames, binaries, depreciated functions, staging enviroment code / credentials etc. Anything that can be specified with regular expression syntax, can be sniffe...

CVE-2021-21972

CVE-2021-21972 विवरण vSphere Client HTML5 में एक vCenter Server प्लगइन में रिमोट कोड निष्पादन की कमजोरी पाई गई है। पोर्ट 443 तक नेटवर्क पहुंच वाला कोई दुर्भावनापूर्ण अभिकर्ता इस समस्या का शोषण करके vCenter Server को होस्ट करने वाले अंतर्निहित ऑपरेटिंग सिस्टम पर अप्रतिबंधित विशेषाधिकारों के साथ...

spring-framework

Spring Framework Questa è la sede del Spring Framework: la base per tutti i progetti Spring. Collettivamente, il Spring Framework e la famiglia di progetti Spring sono spesso indicati semplicemente come "Spring". Spring fornisce tutto ciò che è necessario oltre al linguaggio di programmazione Jav...

CVE-2024-24919-POC

CVE-2024-24919-POC Un semplice strumento per automatizzare CVE-2024-24919 Esposizione di Informazioni Sensibili Caratteristiche Facile da usare. Commenti utili; può testare più domini Uso root@kitploit: git clone https://github.com/SubhankarX01/CVE-2024-24919-POC/ root@kitploit: cd...

firefox: thunderbird: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: Privilege escalation in the Shell Integration component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...

Astra Linux – Vulnerability in symfony

Symfony/http-foundation is a module for the Symphony PHP framework that defines an object-oriented layer for handling HTTP requests. The Request class does not parse URIs containing special characters in the same way that browsers do. As a result, attackers can trick validators that rely on the...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice where the required initialization vector for encryption was always the same,...

Astra Linux – Vulnerability in wpa, pupnp-1.8

The Open Connectivity Foundation’s UPnP specification prior to April 17, 2020, does not prohibit the acceptance of a subscription request with a delivery URL located in a different network segment than the fully qualified event-subscription URL. This is known as the “CallStranger” issue...

firefox: Privilege escalation in the Remote Settings Client component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Remote Settings Client component...

firefox: Privilege escalation in the Shell Integration component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Shell Integration component...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-8962: RHODF 4.20.17 release DFBUGS-8003: GSS Rook Ceph metrics are not being scraped, and the...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.21.11 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9563: Backport to odf-4.21.10 Race condition may allow multiple CephCluster reconciles in parallel...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...

CVE-2026-70710

Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite component: Security API. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sales Foundation...