kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

Security Bulletin: Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability

Summary Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability. Vulnerability was addressed in OS Image for AIX IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-49795 DESCRIPTION: A NULL pointer dereference vulnerability was found in libxm...

macOSTriageCollectionScript

macOSTriageCollectionScript 一个用于 macOS 的取证数据收集脚本，利用 sysdiagnose 并附加少量功能来收集调查所需的取证数据。 该脚本收集哪些数据？ 收集的数据包括： sysdiagnose ，一种在多种 macOS/iOS 操作系统中可用的实用程序，用于收集“系统级诊断信息”。此处主要用于获取其收集的日志文件和实时数据。 文件列表，由于 APFS 不像 NTFS 那样拥有主文件表（MFT），为了了解文件系统上存在哪些内容，我们使用 stat 、 shasum 和 file 的组合创建多个 CSV...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - editcustomer の "id" URL パラメータを介した SQL インジェクションの脆弱性 説明 : Customer Support System バージョン1に SQL インジェクションの脆弱性が存在します。悪意のある攻撃者は、顧客編集時に 'id' URL パラメータを操作することで、MySQL データベース上で SQL コマンドを実行できます。 脆弱性のある製品バージョン : Customer Support System 1.0 CVE 作成者 : Geraldo Alcânta...

CVE-2020-17530

OGNLインジェクションエクスプロイト 概要 Apache Struts2/TomcatのOGNLインジェクション脆弱性を悪用してシステムコマンドを実行するシンプルなPythonスクリプト。 使用方法 pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nixxies in WordPress Plugin Salon booking system versions = 10.31.7...

CVE-2026-75616

CVE-2026-75616 TP-Link Archer C20 v6 Web 管理界面中存在已认证的 OS 命令注入漏洞。 BPA WAN 配置值未经充分净化便传递给 system，使相邻网络上的已认证管理员能够以 root 身份执行命令。 由 Daniil Gordeev（totekuh）发现并报告。 受影响版本 早于 0.9.1 Build 260811 的 Archer C20 v6 EU 固件 早于 0.9.1 Build 260812 的 Archer C20 v6 US 固件 早于 0.9.1 Build 260812 的 Archer C20 v6 RU 固件 前提条件...

CVE-2021-46067

CVE-2021-46067 Exploit 标题：车辆服务管理系统 - 多个 Cookie 窃取导致完全账户接管 Exploit 作者：SANU P.L CVE：CVE-2021-46067 CVSS：9.8 严重 参考资料： https://www.plsanu.com/vehicle-service-management-system-multiple-cookie-stealing-leads-to-full-account-takeover https://nvd.nist.gov/vuln/detail/CVE-2021-46067...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Exploit 标题：Vehicle Service Management System - 'Service List' 存储型跨站脚本（XSS） Exploit 作者：SANU P.L CVE：CVE-2021-46072 CVSS：4.8 中危 参考： https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss https://nvd.nist.gov/vuln/detail/CVE-2021-46072...

xz-backdoor-research

CVE-2024-3094 研究工具包 作者：Nikolaos Natsopoulos ，IAM 顾问 配套研究报告的交互式浏览器工具： "CVE-2024-3094：XZ Utils 中通过社会工程与构建系统操纵实现的供应链入侵" 10.5281/zenodo.20700609 关于 2024 年 3 月，XZ Utils 中被发现了一个后门（CVE-2024-3094），当时它马上就要进入全球各地的稳定版 Linux 发行版。该漏洞获得了 10.0 的 CVSS 最高评分。这次攻击涉及一名虚构的贡献者，他花费近三年时间渗透进该项目，然后插入了本可使数百万台 Linux...

CVE-2026-36213-poc

CVE-2026-36213: Escalada de privilegios local en MEmu Android Emulator 9.2.7.0 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Descripción general Este repositorio contiene una prueba de concepto...

CVE-2026-105254

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105253

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-104806

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2024-57429

CVE-2024-57429 PHPJabbers Cinema Booking System v2.0 の pjActionUpdate 関数におけるクロスサイトリクエストフォージェリ CSRF の脆弱性により、リモートの攻撃者が認証済み管理者を騙して不正なリクエストを送信させることで、権限を昇格させることが可能です。 影響: この CSRF 脆弱性の悪用により、以下のような不正な操作が発生する可能性があります: 管理者のパスワードを変更し、実質的にロックアウトする。 攻撃者のユーザーロールを管理者に更新することで、権限を昇格させる。 エクスプロイト - 概念実証 PoC...

CVE-2026-89972

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

CVE-2026-104811

The Mitel MiVoice Office 400 is vulnerable to remote code execution due to an improper file type validation flaw in the Music on Hold functionality. Located in the web portal on TCP port 443 (Configuration → Services), the application fails to properly restrict uploaded files to the intended WAV ...

CVE-2026-105254

A SQL injection vulnerability exists in the itsourcecode Online Admission System 1.0 . The flaw is located within an unspecified function of the /admin/schoolyear.php file, where manipulation of the sy argument allows for remote exploitation. While an exploit is reported as publicly available, sp...

CVE-2026-105254 itsourcecode Online Admission System schoolyear.php sql injection

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

EUVD-2026-92297

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...