7852 matches found
EUVD-2026-89206
russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened...
CVE-2026-93580
The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...
CVE-2026-93580 InPost for WooCommerce 1.7.5 - 1.9.7 - Unauthenticated Order Status Forgery via Shipment Webhook
The InPost PL WordPress plugin before 1.9.8 does not verify the authenticity of incoming shipment webhook requests, relying only on a non-secret identifier and an IP check that is not enforced, allowing unauthenticated attackers who know a target order's parcel tracking number to forge its shipme...
CVE-2019-0708
CVE-2019-0708 Collect POC and EXP for CVE-2018-0708 from the internet currently no EXP found...
CentOS Linux 8 [TuxCare] Security Update: expat / expat-devel / expat-static (CENTOS-STREAM8:CLSA-2026:1789202718)
The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1789202718 advisory. - libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after- free can occur. NOTE: this i...
CVE-2026-102823
Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...
CVE-2026-102823
Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...
CVE-2026-102823 russh: Client-side channel-scoped Handler callbacks fire for channel IDs the client never opened
Russh is a Rust SSH client and server library. Prior to 0.63.1, clientreadauthenticated in russh/src/client/encrypted.rs forwards CHANNELDATA, CHANNELEXTENDEDDATA, CHANNELEOF, CHANNELCLOSE, CHANNELOPENFAILURE, CHANNELSUCCESS, CHANNELFAILURE, and CHANNELREQUEST subtypes exit-status, exit-signal, a...
security-advisories
Avisos de Seguridad de Threat Lance Repositorio público de avisos de seguridad por Threat Lance. CVE| Título| Severidad| Publicado ---|---|---|--- CVE-2025-50455| EasyAppointments = 1.5.1 Inyección SQL ciega a través de orderby| Crítica| TBD...
CVE-2026-98164
A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem. When virtualized System Management Mode SMM is enabled, memory write tracking only checks the active memory slot rather than all address spaces sharing shadow pages. An attacker inside a guest virtual machine can...
CVE-2026-98164
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
UBUNTU-CVE-2026-98164
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
EUVD-2026-88753
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CVE-2026-98164 KVM: x86/mmu: Check write tracking in all address spaces
In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Check write tracking in all address spaces kvmgfniswritetracked checks only the supplied memslot, but page tracking is per-address-space and shadow pages are shared across all address spaces. With SMM, a GFN can...
CVE-2026-52658
CVE-2026-52658 — XSS almacenado en AureusERP seguimiento de cambios de Chatter CWE-79 · CVSS 8.7 High · AureusERP ≤ v1.4.0 / master Chatter renderiza los campos oldvalue / newvalue del seguimiento de cambios como HTML sin procesar !! !!, sin saneamiento. Un usuario autenticado que edita un regist...
caos-os
CAOS — Customer Assurance Operating System Responde una sola vez a los cuestionarios de seguridad que te envían tus clientes. Toda empresa que maneja datos de clientes recibe las mismas solicitudes una y otra vez: cuestionarios de seguridad, evaluaciones de privacidad, revisiones de riesgo de...
platform_packages_providers_MediaProvider_CVE-2023-40127
Este repositorio no tiene un README...
CVE-2026-98074
A flaw was found in the Linux kernel's network bonding driver. A local user with network administration privileges can cause a physical network adapter to permanently remain in promiscuous mode a configuration where an interface captures all traffic on the local network segment, rather than only...
EUVD-2026-88579
mall4j through 4.0 contains a missing authentication vulnerability in the DeliveryController checkDelivery endpoint that allows unauthenticated attackers to read shipment tracking information by supplying an order number parameter. Attackers can access carrier names, waybill numbers, and complete...