207 matches found
CVE-2023-45503
CVE-2023-45503 脆弱性の詳細 概要 Macrob7 Macs Framework Content Management System（CMS）バージョン1.1.4f以前では、ユーザー入力の安全でない処理により、16件のSQLインジェクション脆弱性が発生します。任意のSQLクエリを実行できることで、ユーザーのパスワードハッシュを含むプライベートデータが漏えいしたり、他のユーザーの認証情報や権限レベルを変更されたりする可能性があります。影響には、権限昇格や潜在的なリモートコード実行（RCE）が含まれます。...
ssh_scan
sshscan A SSH configuration and policy scanner ⚠️ Deprecation Notice ⚠️ Mozilla is no longer maintaining the SSH Scan project. Please fork it to continue development. Key Benefits Minimal Dependencies - Uses native Ruby and BinData to do its work, no heavy dependencies. Not Just a Script -...
AlmaLinux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782382498)
"The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782382498 advisory. - In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T2...
Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1782382498)
"The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1782382498 advisory. - In the Linux kernel, the following vulnerability has been resolved: efi: Do not import certificates from UEFI Secure Boot for T...
CVE-2023-43154-PoC
CVE-2023-43154 - Macs Framework v1.1.4f CMS 型の混乱の脆弱性 目次 1. 概要 2. 概念実証 3. 技術的説明 4. 緩和策 概要 CVE-ID : CVE-2023-43154 CVSS 3.1 : 9.8 脆弱性の説明 : isValidLogin 関数における緩い比較により、PHP の型の混乱の脆弱性が発生し、これを悪用して認証をバイパスし、管理者アカウントを乗っ取ることが可能です。 脆弱なパラメータ : CMS 上のユーザーのユーザー名とパスワード。 影響を受ける製品 : Macs Framework v1.14f -...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerabilities have been resolved: EFI: Do not import certificates from UEFI Secure Boot for T2 Macs. On Apple T2 Macs, when Linux attempts to read the db and dbx EFI variables during early boot to load UEFI Secure Boot certificates, a page fault occurs in the...
Linux Distros Unpatched Vulnerability : CVE-2026-6329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PKCS12 MAC verification uses an attacker-controlled comparison length, weakening the integrity check on the MAC and allowing a mismatched MAC to be accepted. Th...
CVE-2026-43172
A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability occurs during SMEM parsing if the firmware reports an invalid number of Logical Media Access Controllers LMACs, which can lead to an array overrun. This issue could potentially result in system instability or a denial of...
Gitea has insecure default SSH settings
Summary The built-in SSH server currently advertises a number of key exchange, MAC, and host key algorithms that are considered weak or broken. The defaults should be tightened so a fresh installation passes a baseline SSH security audit out of the box. Details Running ssh-audit against a default...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
EUVD-2026-15074
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue affecting Intel-based Mac computers was addressed with additional code-signing restrictions. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.3, macOS Tahoe 26.4. An app may be able to access user-sensitive data...
CVE-2026-20699
A downgrade issue in Apple macOS affecting Intel-based Mac computers allows an application to potentially access user-sensitive data . The vulnerability was addressed by implementing additional code-signing restrictions . This issue is fixed in macOS Sequoia 15.7.5 , macOS Sonoma 14.8.5 , macOS T...
CVE-2026-1627
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic...
PT-2026-27551
Name of the Vulnerable Software and Affected Versions macOS Sequoia versions prior to 15.7.5 macOS Sonoma versions prior to 14.8.5 macOS Tahoe versions prior to 26.4 Description A flaw exists in Intel-based Mac computers that could allow an application to access user-sensitive data. This issue wa...
PT-2026-5845
Name of the Vulnerable Software and Affected Versions Edimax EW-7438RPn version 1.13 Description The Edimax EW-7438RPn version 1.13 contains a cross-site request forgery issue in the MAC filtering configuration interface. An attacker can create malicious web pages to deceive users into adding...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000733)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000733 advisory. The evmverifyhmac function in security/integrity/evm/evmmain.c in the Linux kernel before 4.5 does not properly copy data, which makes it easier for local users to...
