opencode

开源的 AI Coding Agent。 English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt 安装 直接安装 YOLO curl -fsSL https://opencode.ai/install | bash 软件包管理器...

CVE-2026-90402

A flaw was found in the Linux kernel's Mobile Host Interface MHI bus driver. When a controller device fails to create its associated system file sysfs during registration, the device is not properly unregistered. This improper cleanup can lead to a resource leak, potentially causing system...

CVE-2026-93316

A flaw was found in BuildKit. This vulnerability allows an authenticated user to cause a Denial of Service DoS by crashing the daemon. When the BuildKit daemon is started with Container Device Interface CDI support disabled, submitting a build that attempts to use CDI devices triggers an unhandle...

CVE-2024-0012

CVE-2024-0012 CVE-2024-0012 an authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit...

CVE-2020-8816

CVE-2020-8816 A Python script to exploit CVE-2020-8816, a remote code execution vulnerability on the Pi-hole. This script uses the techniques found by François Renaud-Philippon to achieve remote code execution on a Pi-hole running a web interface version less than 4.3.3. The exploit requires the...

CVE-2026-90362

A flaw was found in the Linux kernel's Display Serial Interface DSI driver for Qualcomm Snapdragon MSM devices. The devpmoppsetrate0 function incorrectly removes a power vote for a clock without parking it. This allows the clock to continue running without the necessary power backing, which could...

CVE-2018-5951

CVE-2018-5951: MikroTik RouterOS 拒绝服务漏洞 漏洞概述 MikroTik RouterOS 中存在一个漏洞，允许未经身份验证的远程攻击者强制路由器重启。攻击方式是通过 IP 协议号 97 向 RouterOS 的 IPv6 地址发送一个 1 字节的数据包。所有支持 EoIPv6 的 RouterOS 版本均可能受此攻击影响。该攻击要求目标系统已启用 IPv6 并且至少存在一个隧道接口。 攻击向量 目标系统已启用 IPv6。 没有阻止 IP 协议号 97 的 INPUT 数据的 IPv6 过滤规则。 目标系统中至少存在一个隧道接口（隧道类型无关）。 漏洞详...

CVE-2022-40684

CVE-2022-40684 利用漏洞 CVE-2022-40684 的工具（FortiOS / FortiProxy / FortiSwitchManager - 管理界面认证绕过）...

CVE-2023-34965

CVE-2023-34965 SSPanel UIM is a multi-purpose agency service sales management system specially designed for Shadowsocks / V2Ray / Trojan protocols. SSPanel-Uim version before 2023.3 does not restrict access to the /link/ interface,which can lead to a leak of user subscription information. Detail...

CVE-2024-38063-POC

Enviador de Paquetes de Vulnerabilidad IPv6 para Corrupción de Memoria CVE-2024-38063 Este script de Python está diseñado para enviar paquetes diseñados para desencadenar posibles vulnerabilidades de corrupción de memoria CVE-2024-38063. Utiliza la biblioteca Scapy para crear y enviar paquetes...

CVE-2023-36874

CVE-2023-36874 Prueba de Concepto PoC Una implementación educativa y de investigación defensiva de la vulnerabilidad CVE-2023-36874 , que demuestra una falla de Escalada Local de Privilegios LPE dentro del componente Informe de Errores de Windows WER. ⚠️ Descargo de responsabilidad Este repositori...

CVE-2019-11539

CVE-2019-11539 Original Discovery: Orange Tsai, Meh Chang Authors: Justin Wagner, Alyssa Herrera Thanks to: Orange, Meh Chang, Rich Warren, Alyssa, Mimir Vulnerability Description In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in WebXR in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: VMCI: fixed a race condition between vmcihostsetupnotify and vmcictxunsetnotify. During our testing, it was found that a warning can occur in trygrabfolio. The detailed error message is as follows: ----------- Cut here ----------...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: arm64: acpi: Harden the getcpuforacpiid function to prevent errors when a missing CPU entry is used. During a review discussion of the changes to support vCPU hotplug, it was noted that a check was added to ensure the GICC Global...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Video Capture in Google Chrome on ChromeOS prior to 150.0.7871.47 allowed a local attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: crosectypec: Stale pointers have been set to zero. The function crostypecgetswitchhandles allocates four pointers when obtaining type-c switch handles. These pointers are all freed if none of them are obtained...

Astra Linux – Vulnerability in Chromium

The use of after-free in Views in Google Chrome before version 149.0.7827.53 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd934x: Properly handles channel mapping lists. Currently, each channel is added as a list to the dai channel list. However, there is a risk of adding the same channel to multiple dai channel lists, which could lea...

Astra Linux – Vulnerability in Linux, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: HID: bigbenff: prevent null pointer dereference When emulating the device through UHID, there is a possibility that we do not have output reports, and as a result, reportfield is set to null...