Important: Red Hat Security Advisory: vim security update

An update for vim is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

How-to-Patch-CVE-2025-32709

CVE-2025-32709 취약점 패치 방법 CVE-2025-32709에 대한 실제 패치 워크플로우입니다. 핫픽스 설치부터 SIEM 알림 검증까지 — 이 저장소는 스크린샷, 명령어 및 탐지 로직과 함께 모든 단계를 문서화합니다. Windows 10 Pro 엔드포인트에서 CVE-2025-32709가 높은 심각도 취약점으로 플래그된 Wazuh 취약점 탐지 대시보드의 스크린샷. 에이전트 window10 004는 하나의 높은 심각도 문제를 보고하고 있으며, 시스템이 현재 노출 상태임을 확인합니다. 이 이미지는 패치 전 기준선 역할을 ...

CVE-2026-63000

REDAXO is a PHP-based content management system. Prior to 5.21.2, rexapiinstallpackageupdate in redaxo/src/addons/install/lib/api/apipackageupdate.php inherits the false default from rexapifunction::requiresCsrfProtection instead of requiring a CSRF token. An unauthenticated attacker can cause a...

CLSA-2026-1790176084 TuxCare security update for validator (1 CVE)

TuxCare rebuilt validator to address 1 CVE. Fixed in 7.2.0-tuxcare.2...

react-CVE-2025-55182-fixer

React Server Components 보안 PR 자동화 이 저장소는 CVE-2025-55182 에 영향을 받는 저장소의 react-server-dom- 및 관련 React 패키지의 버전을 자동으로 업데이트하고 풀 리퀘스트PR를 생성하는 스크립트를 제공합니다. 이 도구는 무엇을 하나요? 저장소의 package.json에서 영향을 받는 react-server-dom-, react, react-dom, next 버전을 검사합니다. 필요한 경우 안전한 수정 버전으로 업데이트합니다. 대상 저장소에 업데이트된 종속성으로 PR을...

KB5025175-CVE-2022-41099

このリポジトリには README がありません。...

REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

Summary The rexapiinstallpackageupdate API function install addon does not override requiresCsrfProtection, which defaults to false in the base class rexapifunction. Any authenticated admin can therefore be tricked via a CSRF attack into silently triggering a package update from the REDAXO packag...

CVE-2026-63000 REDAXO: Missing CSRF Protection on Package Update Action Allows Forced Addon Updates

REDAXO is a PHP-based content management system. Prior to 5.21.2, rexapiinstallpackageupdate in redaxo/src/addons/install/lib/api/apipackageupdate.php inherits the false default from rexapifunction::requiresCsrfProtection instead of requiring a CSRF token. An unauthenticated attacker can cause a...

CVE-2026-63000

The REDAXO PHP-based content management system is vulnerable to a Cross-Site Request Forgery (CSRF) attack in versions prior to 5.21.2 . The rex_api_install_package_update function in redaxo/src/addons/install/lib/api/api_package_update.php fails to override the requiresCsrfProtection() method, w...

CLSA-2026-1790164156 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 6.2.2-tuxcare.1...

internet-of-vulnerable-things

脆弱なモノのインターネット 脆弱なモノのインターネット をテーマにした私の小さなタームペーパーの成果です。 概要...

OpenSTAManager_RCE_Exploit-CVE-2026-38751-

OpenSTAManager RCE エクスプロイト CVE-2026-38751 概要 このPythonスクリプトは、CVE-2026-38751として識別されたOpenSTAManagerバージョン2.10のリモートコード実行の脆弱性を悪用します。このエクスプロイトにより、認証されたユーザーは悪意のあるモジュールをアップロードし、ターゲットシステム上で任意のコマンドを実行できます。 脆弱性詳細 CVE ID : CVE-2026-38751 製品 : OpenSTAManager バージョン : 2.10 タイプ : リモートコード実行 RCE 攻撃ベクトル :...

update-apt-package

剧本更新APT包，因为CVE-2019-3462...

Low: Red Hat Security Advisory: libxml2 security update

An update for libxml2 is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2025-61228

CVE-2025-61228 注意 この問題は開発者が示唆するよりも深刻なようです。そのため、この部分が埋もれてしまわないようにしたいと思います。開発者はブログで次のように述べています: これは、お使いのシステム上で動作中のプログラムが SuperDuper の更新を探していて、正規の手段で実際の更新が提示され、あなたが「アップグレード」をクリックした場合にのみ発生します。 これは実際には正しくありません。この脆弱性を悪用するために、正規の手段で実際の更新が提示される必要はありません。SuperDuper 3.10 以前が提供する更新は、絶対に受け入れないでください!...

Moderate: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2026-82996

creationtimestamp| type| source ---|---|--- 2026-09-23 09:50:10+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83022

creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:19+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83028

creationtimestamp| type| source ---|---|--- 2026-09-23 09:49:07+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...

CVE-2026-83090

creationtimestamp| type| source ---|---|--- 2026-09-23 09:47:12+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-11...