Astra Linux – Vulnerability in WebKit2GTK

The issue was resolved by adding additional restrictions on CSS compositing. This issue has been fixed in tvOS 15, watchOS 8, iOS 15, and iPadOS 15. Visiting a maliciously crafted website may reveal a user’s browsing history...

Astra Linux – Vulnerability in Firefox and Thunderbird

Security policy violation events could have revealed cross-origin information due to violations of frame-ancestor rules. This vulnerability affects Firefox ESR versions earlier than 91.5, Firefox versions earlier than 96, and Thunderbird versions earlier than 91.5...

Astra Linux – Vulnerability in Jetty9

In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0alpha0 to 10.0.1, and 11.0.0alpha0 to 11.0.1, CPU usage can reach 100% when receiving a large invalid TLS frame...

Astra Linux – Vulnerability in Tomcat9

Improper handling of the case sensitivity vulnerability in LockOutRealm in Apache Tomcat. This issue affects Apache Tomcat: versions from 11.0.0-M1 through 11.0.21, from 10.1.0-M1 through 10.1.54, from 9.0.0.M1 through 9.0.117, from 8.5.0 through 8.5.100, and from 7.0.0 through 7.0.109. Older,...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: pinctrl: Single issue: fix the potential NULL dereference in pcsgetfunction. The pinmuxgenericgetfunction function may return NULL, and the pointer “function” was dereferenced without checking against NULL. Add checking of the...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: udf: Do not bother merging very long extents. When merging very long extents, we try to assign as much length as possible to the first extent. However, this is unnecessarily complicated and not really worth the effort. Moreover,...

CVE-2019-0708

明日は結婚式に出かけるので、もし何も見つからなければ、誰か他の人が引き継いでください。 金曜日に、まだ公開されているものがなければ、クラッシュPoCをここに落とすつもりだ... もしかしたら翌週になるかも。脆弱な数値が一貫して下がるかどうか次第だ。 https://vimeo.com/339425966 これを何に使うかについて私は責任を負いません。教育目的のみに使用すべきです。 server 2003 と win xp と通信するためのソケットは移植しなかったが、やろうと思えば簡単だろう（security exchange PDU を追加して計算すればいい）...

CVE

安全研究 由 JunZ-Leo 发布的公开漏洞报告。 已发布的 CVE 报告 以下两条记录均已发布在 CVE List 中，并将 JunzLeo VulDB User 列为 报告者 。它们发布于 2025 年 4 月 28 日。 CVE| 受影响产品| 组件| 漏洞类型| 研究报告 ---|---|---|---|--- CVE-2025-4028| PHPGurukul COVID19 Testing Management System 1.0| profile.php| SQL 注入| Issue 1 CVE-2025-4030| PHPGurukul COVID19 Testing...

CVE-2026-27145

cve-id ⚡ 簡単な使い方 このプロジェクトは、以下のような安全で許可された環境でのみ使用してください： ローカル仮想マシン Dockerコンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： root@kitploit: git clone cd 使用例： root@kitploit: Install dependencies Run the project 上記のコマンドを実際のプロジェクトのセットアップ手順に置き換えてください。 クレジットまたは参考資料 url1 📚 教育用セキュリティ研究リポジトリ...

ROOT-OS-DEBIAN-13-CVE-2026-8924 CVE-2026-8924 in curl - Patched by Root

Root has patched CVE-2026-8924 in the curl package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2025-10966 CVE-2025-10966 in curl - Patched by Root

Root has patched CVE-2025-10966 in the curl package for Root:Debian:13. Multiple fixed versions available...

CLSA-2026-1789384773 TuxCare security update for zendframework/zend-view (1 CVE)

TuxCare rebuilt zendframework/zend-view to address 1 CVE. Fixed in 2.1.6-p1+tuxcare...

security-advisories

安全公告 Greg Durys 发布的安全公告。 公告| 产品| 漏洞| 严重程度 ---|---|---|--- Cohesity TranZman| TranZman 迁移设备| 5 个 CVE（CWE-78、CWE-434、CWE-269、CWE-327）| 高 pwnlift| rasta-mouse/pwnlift| CVE-2026-56815（CWE-59、CWE-367）| 高 skillable| Skillable scorm.skillable.com| CVE-2026-56877（CWE-639）| 中 免责声明...

Moderate: Red Hat Security Advisory: perl:5.32 security update

An update for the perl:5.32 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2026-3102

⚠️ Aviso de Investigación de Seguridad y Exención de Responsabilidad Legal 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente solo con fines educativos, académicos e investigación de ciberseguridad autorizada. Está destinado a apoyar la comprensión de: Conceptos de...

ROOT-APP-NPM-GHSA-MMX7-HFXF-JPPX GHSA-mmx7-hfxf-jppx in axios - Patched by Root

Root has patched GHSA-mmx7-hfxf-jppx in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-JQH4-M9W3-8HP9 GHSA-jqh4-m9w3-8hp9 in axios - Patched by Root

Root has patched GHSA-jqh4-m9w3-8hp9 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-44489 CVE-2026-44489 in axios - Patched by Root

Root has patched CVE-2026-44489 in the axios package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-GHSA-PMV8-RQ9R-6J72 GHSA-pmv8-rq9r-6j72 in axios - Patched by Root

Root has patched GHSA-pmv8-rq9r-6j72 in the axios package for Root:npm. Multiple fixed versions available...