CVE-2026-96282

The Flatpak software is vulnerable to a file existence oracle and path traversal via extension metadata. A malicious Flatpak extension can probe the host filesystem to identify existing files and directories at arbitrary paths, potentially disclosing host directory listings to sandboxed applicati...

CVE-2026-96282 Flatpak: flatpak: extension metadata path traversal file existence oracle

A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can be disclosed to sandboxed applications using the extension. Additionally, unvalidated extension metadata can cause extension content to be...

CVE-2026-101090

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboardhost setting is empty, /api/v1/oauth2/provider cmd/dashboard/controller/oauth2.go reflects the attacker-supplied HTTP Host header into the redirecturi sent to the identity...

CVE-2026-101065

Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authentication is disabled, every request is mapped...

CVE-2026-101090 Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboardhost setting is empty, /api/v1/oauth2/provider cmd/dashboard/controller/oauth2.go reflects the attacker-supplied HTTP Host header into the redirecturi sent to the identity...

EUVD-2026-88025

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboardhost setting is empty, /api/v1/oauth2/provider cmd/dashboard/controller/oauth2.go reflects the attacker-supplied HTTP Host header into the redirecturi sent to the identity...

CVE-2026-101090 Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboardhost setting is empty, /api/v1/oauth2/provider cmd/dashboard/controller/oauth2.go reflects the attacker-supplied HTTP Host header into the redirecturi sent to the identity...

CVE-2026-101090

Nezha version 2.2.3 is vulnerable to a Host header injection regression in the OAuth2 redirect endpoint located at /api/v1/oauth2/{provider} (specifically in cmd/dashboard/controller/oauth2.go). When the optional dashboard_host setting is empty, the application reflects an attacker-supplied HTTP ...

CVE-2026-101090 Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboardhost setting is empty, /api/v1/oauth2/provider cmd/dashboard/controller/oauth2.go reflects the attacker-supplied HTTP Host header into the redirecturi sent to the identity...

CVE-2026-96279

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as...

DEBIAN-CVE-2026-96279

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as...

CVE-2026-96279

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as...

CVE-2026-96279 Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as...

CVE-2026-96279

A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remote, allowing disclosure of arbitrary host file contents. For system-wide installs running as root, this includes sensitive files such as...

CVE-2024-21626

CVE-2024-21626 Эксплойт Рабочий каталог docker run -w /proc/self/fd/8 --name cve-2024-21626 --rm -it debian:bookworm Важно указать -w /proc/self/fd/8\ Получите доступ к файловой системе хоста с помощью cat ../../../../../../../../../etc/passwd внутри контейнера Эксплойт Символическая ссылка 1...

CVE-2025-0324-axis-vapix-privesc

CVE-2025-0324 — 근본 원인 분석Root Cause Analysis AXIS OS VAPIX 장치 구성 프레임워크에서 클라이언트가 제어하는Host 헤더가 루트 그룹 백도어로 악용됨. %20%2F%208.8%20High%20\NVD-b3261e TL;DR Axis Communications는 2025-06-02에 CVE-2025-0324를 AXIS OS 플랫폼 전반에서 사용되는 VAPIX® 장치 구성 프레임워크의 치명적인CVSS 9.4 권한 상승 결함으로 공개했으며, 버그 바운티 연구원 Malacupa 의 발견을...

kernel-debug-lab-for-virtual-box

Как настроить лабораторию VirtualBox для отладки драйвера ядра с помощью Windbg Здесь предполагается, что на компьютере A уже установлен windbg, а на компьютере B установлены Visual Studio, SDK и WDK. 1. Откройте Host network Manager, чтобы создать или настроить новый Virtual Box Host-Only Ethern...

CVE-2024-34328

CVE-2024-34328 Открытое перенаправление через Host-заголовок 📝 Обзор Название уязвимости : Открытое перенаправление через Host-заголовок Продукт : Sielox AnyWare Затронутая версия : 2.1.2 CVE ID : CVE-2024-34328 Серьезность : Средняя Вектор атаки : Удаленный Воздействие : Открытое перенаправление...

cve-2024-34351-demo

Демонстрация CVE-2024-34351 Минимальное приложение Next.js 14.0.0 для демонстрации CVE-2024-34351 — уязвимости Server-Side Request Forgery SSRF в Server Actions Next.js. Обнаружена Адамом Кьюзом и Шубхамом Шахом из Assetnote. Исправлена в Next.js 14.1.1. Как работает уязвимость Когда Server Actio...

CVE-2025-9074

Описание Vibe написал небольшой скрипт эксплуатации на чистом Bash без зависимостей от инструментов, которые могут быть не установлены. Скрипт взаимодействует с внутренним Docker API, создаёт и запускает новый контейнер, монтирует диск C хоста, а затем выполняет внутри него команду. Вывод...