CVE-2026-105642 Ghost: Remote Code Execution via Bookmark Card Images

Ghost is a Node.js content management system. From 6.56.0 until 6.67.0, an image processing library bundled with Ghost contained a vulnerability in its SVG handling. Any staff user, including Contributors, could create a bookmark card for an attacker-controlled website, resulting in arbitrary...

UBUNTU-CVE-2026-93317

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

UBUNTU-CVE-2026-93319

A malicious external BuildKit frontend can send requests using the internal API that can create conditions for a data race that can cause the BuildKit daemon to panic...

UBUNTU-CVE-2026-93318

A malicious image can advertise DiffIDs from another image while containing different layer contents. In affected versions, BuildKit could use the advertised DiffIDs to derive cache and snapshot identity without validating that they matched the actual layer contents. If a BuildKit daemon with...

UBUNTU-CVE-2026-93323

The Dockerfile frontend loaded the Dockerfile and .dockerignore files of a build context into memory without a size limit. A build context containing an oversized file could make buildkitd allocate memory proportional to that file, potentially exhausting memory and terminating the daemon, which...

CVE-2022-34169

描述 检查您的机器上是否已修复 CVE-2022-34169。据我所知，该漏洞由一名 Google 员工发现，尚未公开。由于修复方法已知，因此编写了一个小型测试例程，用于在运行时检查该修复是否已应用。 自行构建（可选） 可选：仅当您安装了 JDK 时才可用： 可选：检查 javac 是否可用：sudo updatedb && sudo locate /bin/javac javac Bcel.java 出现的六个警告可以忽略。被标记的代码用于包含 OpenJDK 中可用的 Bcel 库。如果自行包含 Bcel 库，则会稍微复杂一些，并且版本将是预定义的——这不一定符合本练习的精神。 运行...

CVE-2026-93317 Container blob cache can accept unverified content

An unauthenticated attacker controlling a registry or OCI-layout blob source could provide blob contents that did not match the claimed digest. The resulting snapshot could be cached under that digest and reused by a later victim build, compromising build-input integrity...

ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root

Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...

CLSA-2026-1791220396 TuxCare security update for 13 packages (1 CVE)

TuxCare rebuilt 13 packages to address 1 CVE. Fixed in 6.0.17.Final-tuxcare.2...

CVE-2024-23346-exploit

CVE-2024-23346-exploit This is a exploit for the known Remote Code Execution RCE vulnerability in the pymatgen CVE-2024-23346 Python library by uploading a malicious CIF file to the hosted CIF Analyzer website on the Chemistry machine from Hack the Box. NVD CVE LINK :...

CLSA-2026-1791217857 TuxCare security update for org.springframework (10 CVEs)

TuxCare rebuilt 21 org.springframework packages to address 10 CVEs. Fixed in 4.3.25.RELEASE-tuxcare.6...

CVE-2026-6789-Stack-Buffer-Overflow-in-Embedded-TLS-Certificate-Parser

9. CVE-2026-6789 – Desbordamiento de búfer de pila en el analizador de certificados TLS embebido Resumen Una popular librería TLS ligera simulada contiene un desbordamiento de búfer de pila al analizar extensiones de Subject Alternative Name de certificados X.509 con un campo de longitud...

CVE-2026-27641-Flask-Reuploaded

CVE-2026-27641 是一个严重的安全漏洞，影响 Flask-Reuploaded 库的某些版本。它允许远程攻击者实现任意文件写入。 受影响版本： 1.5.0 要测试该漏洞： python3 -m venv flaskreuploadedvenv 在 flaskreuploadedvenv 中： pip install "Flask-Reuploaded==1.4.0" 启动 vulnserver 并测试 PoC...

ff4j__ff4j_CVE-2022-44262_1_8_13_fixed

✨✨✨ FF4J - Feature Flipping para Java ✨✨✨ Codacy Badge FF4j es una implementación del patrón Feature Toggle. 🤘Características Feature Toggle: Activa y desactiva funciones en tiempo de ejecución, sin despliegues. En tu código, implementa múltiples rutas protegidas por predicados dinámicos...

CLSA-2026-1791215922 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 2.1.4-tuxcare.1...

CLSA-2026-1791215851 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.9-tuxcare.1...

CLSA-2026-1791215768 TuxCare security update for brace-expansion (1 CVE)

TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 5.0.5-tuxcare.1...

CVE-2023-27372

脚本的安装与执行 💻 前提条件 在开始之前，请确保你的机器上已安装以下工具： Python 3.x Git pip （用于管理 Python 依赖） 安装步骤 1. 克隆仓库 使用 git 克隆仓库： git clone https://github.com/dream434/CVE-2023-27372 2. 进入项目目录 cd CVE-2023-27372 3. 运行应用程序 pip install collorama python CVE-2023-27372.py http://exemple.com ⚠️ 警告 ：将此工具用于恶意目的是严格禁止 的。...

noSAMBAnoCRY-CVE-2017-7494

noSAMBAnoCRY CVE-2017-7494 Exploit remoto para la vulnerabilidad SAMBA CVE-2017-7494, también conocida como isknowpipename! Detalles Este exploit se divide en 3 partes: Compila la evilLib en las siguientes arquitecturas: x8664, x86 o i686 Encuentra un recurso compartido escribible y sube evilLib ...

SnakeYAML-CVE-2022-1471-POC

SnakeYAML-CVE-2022-1471-POC 用于 Veracode 博客的代码 为了演示代码执行： 1. 使用 Maven 构建项目 2. 执行 python3 -m http.server 8080 以运行 HTTP 服务器 3. 运行 exploit.java。你应该会在服务器上观察到一次 HTTP GET 请求 4. 为了演示 SnakeYAML 2.0 如何防止该攻击，请注释掉 pom.xml 中的 1.33 依赖 5. 取消注释 2.0 依赖，然后重新构建项目 6. 注释掉 exploit.java 并取消注释 Poc.java 7. 运行 Poc.java 并观察...