CLEANSTART-2026-EX19348 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...

[SECURITY] Fedora 45 Update: frama-c-33.0-3.fc45

Frama-C is a suite of tools dedicated to the analysis of the source code of software written in C. Frama-C gathers several static analysis techniques in a single collaborative framework. The collaborative approach of Frama-C allows static analyzers to build upon the results already computed by...

CVE-2026-25212

CVE-2026-25212 – Percona PMM RCE PoC 重大 – CVSS 9.9 – PMM 3.7 における認証済みリモートコード実行 説明 この実証コードは、PMM の内部 PostgreSQL ユーザーが 'SUPERUSER' 権限を保持している脆弱性を悪用します。認証された攻撃者（'pmm-admin' 権限を持つ）は、「データソースの追加」機能を悪用し、PostgreSQL の 'COPY ... TO PROGRAM' を使用して任意の OS コマンドを実行できます。 影響を受けるバージョン: PMM 3.7 修正バージョン: PMM 3.7 以降 必要...

The vulnerability of Visual Studio Code’s source editor, related to the manipulation of intersite requests, allows a hacker to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor lies in its insufficient checking of unusual or exceptional states, allowing attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor, related to the use of a name with an incorrect reference, allows attackers to gain unauthorized access to protected information.

The vulnerability of Visual Studio Code’s source editor is related to the use of a name with an incorrect reference. Exploiting this vulnerability could allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of Visual Studio Code’s source editor, related to deficiencies in HTTP request processing, allows attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

The vulnerability of Visual Studio Code’s source editor, related to the occurrence of interpretation conflicts, allows attackers to circumvent security restrictions.

The vulnerability of Visual Studio Code’s source editor is related to the occurrence of interpretation conflicts. Exploiting this vulnerability allows a malicious actor to bypass security restrictions remotely...

PT-2026-107265

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Scaffolder source-control actions may not consistently enforce intended credential boundaries. This allows an authenticated user to cause an affected action to fall back to broader integration...

Karma Pro 0.14

Karma Pro is an open source code review tool written in Swift that can assist code reviewers with a multitude of useful tools. Karma Pro is a macOS source-code security scanner AST base and Heuristics that statically analyses projects in multiple languages. It's backed by an ML classifier trained...

PT-2026-106783

Name of the Vulnerable Software and Affected Versions Payload versions 3.0.0 through 3.89.9 Payload versions prior to 4.0.0-canary.34 Description An access-control bypass exists in the duplicate operation, which allows the copying of values from a source document even if a field is hidden or if t...

PT-2026-107300

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 3.3.1 Backstage versions prior to 3.4.1 Backstage versions prior to 4.0.3 Backstage versions prior to 4.1.0 Description The @backstage/plugin-scaffolder-backend package contains an authorization bypass regarding...

Rocket.Chat

チームコミュニケーションのための究極のセキュアなオープンソースソリューション Rocket.Chatは、高いデータ保護基準を持つ組織向けにTypeScriptで開発された、オープンソースで安全かつ完全にカスタマイズ可能なコミュニケーションプラットフォームです。 私たちはチームコミュニケーションのための究極のソリューションであり、同僚同士、他社、そして顧客や市民との間で、どのような接続方法であってもリアルタイムの会話を可能にします。その結果、生産性とユーザー満足度が向上します。 毎日、150以上の国と地域、ならびにDeutsche Bahn（ドイツ鉄道）、米国海軍、Credit...

grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards

A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...

grafana: grafana: Information disclosure via unrevoked access tokens in paused shared dashboards

A flaw was found in Grafana. This vulnerability allows information disclosure because pausing a shared dashboard fails to revoke access tokens for endpoints serving initialization data. An unauthenticated remote attacker possessing the link to a paused dashboard can exploit this flaw to retrieve...

security-baseline-ubuntu

☕ Support the Project If this practical guide has saved your host from compromise, helped you configure your security baseline, or saved you hours of debugging AppArmor and Firejail profiles, you can support the author and further development of this open-source initiative. ⚠️ OPSEC Warning:...

CVE-2026-43499-T807D

T807D 最終成果物—ソースコード一対一対応復元パッケージ 生成日：2026-08-08 結論 本ディレクトリには、現在のプロジェクトで復元可能な完全な popsicle ソースツリー、必要なヘッダーファイル、埋め込み su ペイロード、本番バイナリ、および実行スクリプトが整理されています。 区別する必要があります： 1. r562 SO と r557 helper の本番バイナリは完全に保持されており、ハッシュは検証可能です。 2. プロジェクトには、これら2つの本番バイナリのコンパイル前の旧ソーススナップショット、オブジェクトファイル、または DWARF...

CVE-2026-93326 Crafted Git build source can bypass certain policy validation

A build step for a Git source, crafted in a specific way, can bypass some policy validation rules. A malicious build definition can make the repository look like it is coming from a different remote URL than it really is when Git clone is happening. If policy is doing more stricter validation, fo...

opencode

오픈 소스 AI 코딩 에이전트. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dansk | 日本語 | Polski | Русский | Bosanski | العربية | Norsk | Português Brasil | ไทย | Türkçe | Українська | বাংলা | Ελληνικά | Tiếng Việt 설치 YOLO curl -fsSL https://opencode.ai/install | bash 패키지 매니저 npm i ...

Grafana-CVE-2021-43798

Grafana-CVE-2021-43798 Grafanaの機密データを復号化および暗号化するためのツールのPython実装で、特にCVE-2021-43798に関連する脆弱性に対応しています。Grafanaはすべてのデータソースパスワードを、defaults.ini設定ファイル内のsecretkeyを使用してAESアルゴリズムで暗号化します。 スクリーンショット 依存関係のインストール pip install cryptography...