CVE-2021-42013

CVE-2021-42013 寄稿者 석은호@eunho87 CVE-2021-42013 Apache http Server パストラバーサル 脆弱性の概要 Apache HTTP Server 2.4.50 のパス正規化処理に存在するバグにより、認証なしで 任意のファイルを読み取ったり、リモートコードを実行したりできます。 CVE-2021-41773 の不完全なパッチによって発生し、二重 URL エンコード %%32%65 を介して Apache のパスブロックをバイパスします。 参考資料 NVD - CVE-2021-42013 Apache Security Advisory...

opentsdb_key_cmd_injection

opentsdbkeycmdinjection OpenTSDB = 2.4.1 のコマンドインジェクション脆弱性 CVE-2023-36812/CVE-2023-25826 を悪用するエクスプロイトで、Fortran で記述されています。 概要 これは、OpenTSDB バージョン 2.4.1 以前のコマンドインジェクション脆弱性 CVE-2023-36812/CVE-2023-25826 に対するエクスプロイトです。このエクスプロイトはモダン Fortran で書かれており、今年初めに作成された公式の Fortran http-client ライブラリ を活用しています。 脆弱性の詳...

CVE-2026-32202

零点击强制认证：查看包含精心构造的 .lnk 文件的文件夹，在图标渲染过程中会触发 UNC 解析，强制受害者建立由攻击者控制的外向连接，从而泄露（并允许中继）其 Net-NTLMv2 凭证。该漏洞源于对 CVE-2026-21510 的不完全修补：微软添加的信任验证仅在 ShellExecuteExW 调用时（即执行时）生效，但损害已在 CControlPanelFolder::GetUIObjectOf 调用时造成，而该调用发生在任何 ShellExecute 信任验证之前。 资源管理器调用 CControlPanelFolder::GetUIObjectOf 获取图标 -...

CVE-2026-26114-Patch

CVE-2026-26114-Patch parcheando el N-day de CVE-2026-26114 antes que microsoft. donde microsoft no pudo parchear el 100% en muchos meses. pero FAC security lo hizo...

Mirth-Connect-CVE-2023-43208

CVE-2023-43208: Esecuzione di Codice Remota RCE non autenticata in NextGen Mirth Connect Questo exploit sfrutta una vulnerabilità critica di deserializzazione nel motore XStream di Mirth Connect. Deriva da una patch incompleta per CVE-2023-37679, consentendo l'esecuzione di codice arbitrario non...

Incomplete Fix in MONAI: algo_from_pickle() pickle.loads() RCE still present in v1.5.2 despite GHSA-89gg-p5r5-q6r4 claiming patch

Summary GHSA-89gg-p5r5-q6r4 claims the pickle deserialization vulnerability in algofrompickle was fixed in v1.5.2. However, monai/auto3dseg/utils.py has not been modified since 2024-07-12 — 18 months before v1.5.2 was released 2026-01-29. All three pickle.loads calls remain unchanged. The fix was...

CVE-2026-47233 Admidio: Any logged-in user can delete inventory fields via `mode=field_delete` — incomplete fix of #2024

Admidio is an open-source user management solution. Version 5.0.9 added a missing isAdministratorInventory gate to case 'itemdelete': in modules/inventory.php. The same fix was not applied to the sibling case 'fielddelete': handler, which destroys an entire inventory field definition, cascading t...

CVE-2026-48048 XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-19429

CVE-2026-19429 relates to Jenkins FilePath.untarFrom() where TAR extraction does not validate tar entry symlink targets, allowing an authenticated user with Item/Configure privileges to create workspace symlinks that point to arbitrary files on the Jenkins controller. This can enable reading sens...

N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability

N-able N-central contains an authentication bypass using an alternate path or channel allows for authentication bypass and account takeover in N-central. This vulnerability is the result of an incomplete patch for CVE-2026-18556...

CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

CVE-2026-18577 Incomplete patch leads to administrative account takeover

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

VulnCheck KEV: CVE-2026-18577

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1...

PYSEC-2026-1950 Tendenci Affected by Authenticated Remote Code Execution via Pickle Deserialization

A critical deserialization vulnerability exists in Tendenci Helpdesk module NOTE, by default, Helpdesk is NOT enabled, affecting the version 15.3.11 and earlier. This vulnerability allows remote code execution RCE by an authenticated user with staff security level due to using Python's pickle...

GHSA-7V6W-C3F4-9WPQ OpenRemote has an incomplete fix for CVE-2026-40882: XXE in KNXProtocol.startAssetImport() allows arbitrary file read via unprotected XMLInputFactory

Summary The fix for CVE-2026-40882 addressed only the Velbus asset import handler. The KNX asset import handler KNXProtocol processes user-uploaded ETS project ZIP files through Saxon XSLT and XMLInputFactory.newInstance with no XXE protection, allowing any authenticated user to read arbitrary...

GHSA-FXJ4-P9XP-37V5 HAPI FHIR: Incomplete fix for CVE-2026-45367: DSTU2 FHIRPathEngine.matches() missing RegexTimeout protection allows ReDoS

Summary The fix for CVE-2026-45367 added RegexTimeout protection to the matches function in DSTU2016MAY, DSTU3, R4, R4B, and R5, but the DSTU2 module was incompletely patched. In org.hl7.fhir.dstu2, replaceMatches was updated while matches at line 2462 still calls the raw String.matchessw without...

Linux Distros Unpatched Vulnerability : CVE-2026-41409

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer.getObject was incomplete. The classname allowlist of classes allowed to be deserialized was applied t...

A Shortcut to Coercion: Incomplete Patch of APT28's Zero-Day Leads to CVE-2026-32202

...

FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function apigenerate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...

GHSA-5H65-JX66-J7P5 FastChat has Denial of Service Through Blocking Event Loop in Model Workers (Incomplete Fix for ff66426)

A security vulnerability has been detected in lm-sys fastchat up to 0.2.36. This issue affects the function apigenerate of the component Worker API Endpoint. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed publicly and may be...