CVE-2026-85087

Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-85483

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2020-8554

Kubernetes 클러스터 생성 kind create cluster --config ./kind.yaml 클러스터에는 certmanager가 설치되어 있어야 합니다: https://cert-manager.io/docs/installation/kubernetes/ 취약점 테스트 kubectl apply -f - 'EOF' apiVersion: v1 kind: Namespace metadata: name: kubeproxy-mitm --- apiVersion: apps/v1 kind: Deployment metadata: nam...

CVE-2025-63587

rittalvuln この脆弱性は確実に Rittal CMC III 7030.000（3.15.704）に関連しますが、他の製品にも関連する可能性があります。 脆弱性の本質: 正しいログインではレスポンスが login failed を返しますが、誤ったログインでは 'some error has occured...' というエラーが返ります。 正しいログイン 誤ったログイン...

ovswrap

OVSwrap — Linux 커널 Open vSwitch 데이터패스 오버플로 추적 사이트 OVSwrap 패치 상태 추적기의 소스: Linux 커널의 Open vSwitch 데이터패스 오버플로에 대한 수정을 어떤 배포판이 제공했는지 기록하는 단일 페이지 사이트입니다. 실제 정보가 있는 곳 버그에 관한 모든 정보CVE ID, 영향을 받는 버전 및 수정된 버전, 업스트림 수정 커밋, 발견 및 공개 공로, 현재 배포판별 패치 상태는 이 README가 아닌 추적기 페이지에 있습니다: 렌더링 결과:...

CVE-2026-105098

A security flaw exists in Omega Solution CoinEx Crypto 2025 within the Support Ticket API component. Specifically, an unknown function in the /ticket/customer file is vulnerable to information disclosure when an attacker remotely manipulates the status/page/count arguments. While a public exploit...

CVE-2026-105098 Omega Solution CoinEx Crypto Support Ticket API customer information disclosure

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

EUVD-2026-92066

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

Rudder Server < 1.3.0-rc.1 - SQL Injection

Rudder-server is part of RudderStack, an open source Customer Data Platform CDP. Versions of rudder-server prior to 1.3.0-rc.1 are vulnerable to SQL injection. This issue may lead to Remote Code Execution RCE due to the rudder role in PostgresSQL having superuser permissions by default. Version...

PT-2026-104602

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-105098: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in Omega Solution CoinEx Crypto 2025. Affected is an unknown function of the file /ticket/customer of the component Support Ticket API. The manipulation of the argument status/page/count results in information disclosure. The attack can be executed remotely. Th...

CVE-2026-24332

CVE-2026-24332 – Discord Invisible 모드 프레즌스 유출 요약 이 저장소는 Discord 클라이언트와 API에 영향을 미치는 미패치 프라이버시 침해 이슈인 CVE-2026-24332를 문서화합니다. 이 취약점은 외부 클라이언트가 Invisible 로 표시된 사용자가 실제로 온라인인지 판별할 수 있게 합니다. 세부 정보 CWE-200: 민감 정보 노출 CVSS: 4.3 Medium 상태: 미패치 2026년 기준 영향: 프라이버시 유출 Discord의 WebSocket 프레즌스 시스템은 Invisible...

Linux Distros Unpatched Vulnerability : CVE-2026-85483

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users...

Linux Distros Unpatched Vulnerability : CVE-2026-92834

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0...

Linux Distros Unpatched Vulnerability : CVE-2026-85087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation, Return of wrong status code vulnerability in Apache Thrift python bindings. This issue affects Apache Thrift: before 0.25.0...

GO-2026-6497 vulnerabilities

Vulnerabilities for packages: rancher-helm, gitness, flux-helm-controller, cert-manager-cmctl, helm-push, k8sgpt, k9s, kargo, manifest-tool, opentofu, helm-mapkubeapis, xeol, tigera-operator, maru, kyverno-notation-aws, cluster-api-helm-controller, helm-set-status, kube-arangodb...

GO-2026-6499 vulnerabilities

Vulnerabilities for packages: rancher-helm, gitness, flux-helm-controller, cert-manager-cmctl, helm-push, k8sgpt, k9s, kargo, manifest-tool, opentofu, helm-mapkubeapis, xeol, tigera-operator, maru, kyverno-notation-aws, cluster-api-helm-controller, helm-set-status, kube-arangodb...

AZL-105422 CVE-2026-92834 affecting package thrift 0.24.0-1

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

DEBIAN-CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-92834

Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...