153 matches found
CVE-2022-43343
CVE-2022-43343에 대한 설명 N-Prolog v1.91에서 Main.c의 gettoken 함수에 전역 버퍼 오버플로 취약점이 발견되었습니다. 재현 취약점을 재현하려면 취약한 버전의 N-Prologv1.91를 다운로드하고 프로젝트를 컴파일합니다: git clone https://github.com/sasagawa888/nprolog.git cd nprolog git checkout ae7cc9bf6087cfcb57baadbe59f5005c6dc0f09c make 프로젝트가 컴파일되면 이 저장소에 포함된 PoCProof...
CVE-2025-63848
CVE-2025-63848 swish-prolog cve SWISH Prolog 2.2.0 이하 버전에서 발견된 저장형 교차 사이트 스크립팅XSS 취약점으로, 공격자가 조작된 웹 IDE 노트북을 통해 임의 코드를 실행할 수 있습니다. 영향 원클릭 계정 탈취. 완화 방법 최신 버전으로 업그레이드하여 ATO를 완화하세요. https://github.com/SWI-Prolog/swish/commit/4fb6acb97bedf993ec406a2ef324eeb2a16c49e3...
aethel_core
Aethel-Core: Automated Cognitive Defense & Cyber Threat Simulation WAF A hybrid cybersecurity framework built in SWI-Prolog , designed for real-time threat mitigation and generating structured logic datasets for LLM Instruction Tuning and Neuro-Symbolic AI Training. Key Innovations & Architecture...
OESA-2026-2973 expat security update
expat is a stream-oriented XML parser library written in C. expat excels with files too large to fit RAM, and where performance and flexibility are crucial. Security Fixes: libexpat before 2.8.2 has an integer overflow in storeAtts.CVE-2026-56403 libexpat before 2.8.2 has an integer overflow in...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: schedext: The issue where the isbpfmigrationdisabled function returned a false negative for tasks that are not under PREEMPTRCU protection was fixed. Since the commit 8e4f0b1ebcf2 “bpf: use rcureadlockdontmigrate for trampoline.c...
CVE-2026-31734 sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix isbpfmigrationdisabled false negative on non-PREEMPTRCU Since commit 8e4f0b1ebcf2 "bpf: use rcureadlockdontmigrate for trampoline.c", the BPF prolog bpfprogenter calls migratedisable only when CONFIGPREEMPTRCU is...
CVE-2026-31734
In the Linux kernel, the following vulnerability has been resolved: schedext: Fix isbpfmigrationdisabled false negative on non-PREEMPTRCU Since commit 8e4f0b1ebcf2 "bpf: use rcureadlockdontmigrate for trampoline.c", the BPF prolog bpfprogenter calls migratedisable only when CONFIGPREEMPTRCU is...
PT-2026-36369
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the sched ext component where the is bpf migration disabled function produces a false negative on systems where CONFIG PREEMPT RCU is disabled. This occurs because the...
RHEL 8 : expat (RHSA-2025:22842)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2025:22842 advisory. Expat is a C library for parsing XML documents. Security Fixes: expat: internal entity expansion CVE-2013-0340 expat: integer overflow in t...
CVE-2025-63848
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
EUVD-2025-198293
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
CVE-2025-63848
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
CVE-2025-63848
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
CVE-2025-63848
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
SWI-Prolog SWISH 安全漏洞
SWI-Prolog SWISH is a Web Integrated Development Environment from the SWI-Prolog organization. A security vulnerability exists in SWI-Prolog SWISH version 2.2.0 and earlier, which stems from stored cross-site scripting and could lead to the execution of arbitrary code...
CVE-2025-63848: Improper Neutralization of Input During Web Page Generation
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
CVE-2025-63848
SWISH prolog (version 2.2.0 and earlier ) is vulnerable to a stored cross-site scripting (XSS) flaw. An attacker can execute arbitrary code by providing a crafted web IDE notebook , which may lead to account takeover (ATO) . To mitigate this risk, users should upgrade to the latest version; a spe...
CVE-2025-63848
Stored cross site scripting xss vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook...
PT-2025-47605
Name of the Vulnerable Software and Affected Versions SWISH prolog versions through 2.2.0 Description A stored cross site scripting issue exists in SWISH prolog through version 2.2.0. This allows attackers to execute arbitrary code through a specially crafted web IDE notebook. The issue involves...