22837 matches found
CVE-2026-60004
CVE-2026-60004 — Gitea diffpatch RCE Gitea diffpatch 端点远程代码执行 PoC。拥有仓库写权限的账户开放注册实例上匿名注册即可即可在服务器上以 Gitea 服务账户 执行任意 shell 命令。 漏洞简述 POST /api/v1/repos/owner/repo/diffpatch 在共享的 bare 临时克隆仓库 中应用攻击者控制的补丁: root@kitploit: git apply --index --recount --cached --binary Git ≥ 2.32 时追加 -3 三路合并回退 攻击链:同一个补丁提交两...
Twenty-Three-Scanner
🛰️ Twenty-Three Scanner 一个强大 、快速 且优雅 的扫描器，用于检测受 CVE-2026-24061 影响的易受攻击的 Telnetd 服务。使用纯 Python 标准库构建——零外部依赖。 -A32D2A?style=for-the-badge 🔗 目录 ⚖️ 许可证 🧩 功能特性 ☣️ 漏洞详情 ⚡ 服务状态 🧪 概念验证（PoC） 💥 受影响版本 🧵 已修复版本 ⚔️ 攻击向量 🚨 CVSS 评分 🛠️ 安装 📜 使用方法 🎯 示例 ⚗️ 演示...
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
SolarWinds Web Help Desk before version 12.8.3 contain a critical Java deserialization vulnerability that enables remote code execution. Attackers can exploit this flaw to execute arbitrary commands on the host machine. Initially reported as unauthenticated, SolarWinds was unable to reproduce...
ROOT-OS-DEBIAN-12-CVE-2026-4360 CVE-2026-4360 in python3.11 - Patched by Root
Root has patched CVE-2026-4360 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-11972 CVE-2026-11972 in python3.11 - Patched by Root
Root has patched CVE-2026-11972 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2026-0864 CVE-2026-0864 in python3.11 - Patched by Root
Root has patched CVE-2026-0864 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2023-54107 CVE-2023-54107 in linux - Patched by Root
Root has patched CVE-2023-54107 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2026-23085 CVE-2026-23085 in linux - Patched by Root
Root has patched CVE-2026-23085 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
CLSA-2026-1788560406 TuxCare security update for ws (3 CVEs)
TuxCare rebuilt ws to address 3 CVEs. Fixed in 8.13.0-tuxcare.1...
ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root
Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...
ROOT-OS-DEBIAN-12-CVE-2025-5372 CVE-2025-5372 in libssh - Patched by Root
Root has patched CVE-2025-5372 in the libssh package for Root:Debian:12. Multiple fixed versions available...
Astra Linux – Vulnerability in Firefox
By using 3D CSS in conjunction with JavaScript, content could be rendered outside the webpage’s viewport. This led to a spoofing attack that could be used for phishing or other attacks against users. This vulnerability affects Firefox versions earlier than 88...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ixgbexdpsetup The ixgbe driver currently generates a NULL pointer dereference with some machine online cpus ringfeatureRINGFFDIR.limit = count; It becomes 63. When user use xdp,...
Astra Linux – Vulnerability in Mariadb 10.3
It has been discovered that MariaDB Server v10.6.3 and earlier contain a use-after-free in the VDec::VDec component at /sql/sqltype.cc...
Astra Linux – Vulnerability in net-snmp
Net-SNMP provides various tools related to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials could use a malformed OID in a SET request to NET-SNMP-AGENT-MIB::nsLogTable” to cause a NULL pointer dereference. Version 5.9.2 includes a patch to addres...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
There is a flaw in the urllib’s AbstractBasicAuthHandler class. An attacker who controls a malicious HTTP server to which an HTTP client such as a web browser connects can trigger a Regular Expression Denial of Service ReDOS during an authentication request. This occurs when the server sends a...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel before version 6.0.3, the file drivers/gpu/drm/virtio/virtgpuobject.c misinterprets the return value of drmgemshmemgetsgtable. It expects the value to be NULL in the error case, but in reality, it is an error pointer...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/radeon: A forced lockup of the work queue has been added to delay processing when using radeon. Although the radeon card performs fence operations and waits for the GPU to complete processing the current batch of rings, there...
Astra Linux – Vulnerability in Python 3.11, Python 3.7
When an address list is folded, and the separating comma ends up on a folded line that needs to be encoded using Unicode, then the separator itself must also be encoded using Unicode. The expected behavior is that the separating comma remains a plain comma. However, this can lead to the address...