6451 matches found
CVE-2026-25596
CVE-2026-25596 ā InvoicePlane 1.7.0 äøéčæäŗ§ååä½åē§°č§¦åēååØå XSS ę¼ę“ē±»åļ¼ éčæäŗ§ååä½åē§°åꮵ触åēååØåč·Øē«čę¬ļ¼XSSļ¼ äŗ§åļ¼ InvoicePlane åå½±åēę¬ļ¼ 1.7.0ļ¼åÆč½å½±åę“ę©ēę¬ļ¼ äø„éēØåŗ¦ļ¼ äøå± CVSS 3.1 čÆåļ¼ 4.8ļ¼CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:Nļ¼ CWEļ¼ CWE-79ļ¼åØē½é”µēęęé“ęŖåƹč¾å „čæč”éå½äøå åē°č ļ¼ Leonidas Agathos ę„åę„ęļ¼ 2026-01-31 ęčæ°...
PHPunit-Exploit
PHPunit Exploiter + Checker CVE-2017-9841 ę¦č¦ : PHPUnit ćÆćPHP ććć°ć©ćć³ć°čØčŖēØć®ć¦ććććć¹ććć¬ć¼ć ćÆć¼ćÆć§ćććććÆćSUnit ć«ē±ę„ć JUnit ć§ę®åććć¦ććććć¹ććć¬ć¼ć ćÆć¼ćÆć® xUnit ć¢ć¼ćććÆćć£ć®ćµć³ćć«ć§ććPHPUnit ćÆ Sebastian Bergmann ć«ćć£ć¦ä½ęććć¾ććć ć¤ć³ć¹ćć¼ć« root@kitploit: python3 -m pip install -r requirements.txt ē»å...
Linux Distros Unpatched Vulnerability : CVE-2026-82052
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specif...
EUVD-2026-72939
The $regexFindAll expression can be used by an authenticated user who can run aggregation pipeline stages to crash a MongoDB server mongod. Under certain specific conditions the regex match can start in the middle of a multi-code-unit character, triggering an assertion during query execution...
Security update for yast2-auth-client
This update for yast2-auth-client fixes the following issue: Update to version 4.6.3. CVE-2026-59681: OS command injection via unsanitized Organizational Unit/dnsHostName in AD join AutoYaST-reachable bsc1272775. Patch Instructions: To install this SUSE update use the SUSE recommended installatio...
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: Update to version 3.1.25. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUS...
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: Update to version 4.4.5. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...
Security update for yast2-samba-client
This update for yast2-samba-client fixes the following issue: Update to version 4.7.2. CVE-2026-25706: OS command injection via attacker-controlled Organizational Unit Active Directory-supplied during interactive domain join bsc1272776. Patch Instructions: To install this SUSE update use the SUSE...
Linux Distros Unpatched Vulnerability : CVE-2026-80682
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by...
SUSE CVE-2026-80682
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
CVE-2026-75144
A flaw was found in FFmpeg. Attackers can trigger memory corruption in the VC-2/Dirac RTP packetizer by supplying a specially crafted Dirac data unit. This heap buffer overflow occurs because the packetizer copies input data into a fixed-size buffer without proper size validation. This can lead t...
CVE-2026-80682
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
UBUNTU-CVE-2026-80682
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
EUVD-2026-67558
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
CVE-2026-80682
CVE-2026-80682 is a unit mismatch bug in the Linux kernel 's RISC-V memory management subsystem (riscv/mm). When computing vmemmap_start_pfn, the kernel fed MAX_FOLIO_VMEMMAP_ALIGN (measured in bytes of struct page storage) directly into VMEMMAP_ADDR_ALIGN, which operates in the physical-address ...
CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
CVE-2026-80682 riscv/mm: use physical alignment for vmemmap_start_pfn
In the Linux kernel, the following vulnerability has been resolved: riscv/mm: use physical alignment for vmemmapstartpfn RISC-V computes vmemmapstartpfn by rounding physrambase down to VMEMMAPADDRALIGN. That alignment must therefore be expressed in the physical-address domain. Commit 476849b0fba4...
RHEL 10 : assertj-core (RHSA-2026:59372)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:59372 advisory. A rich and intuitive set of strongly-typed assertions to use for unit testing either with JUnit or TestNG. Security Fixes: assertj: AssertJ:...
Astra Linux ā Vulnerabilities in Linux, Linux-5.10, Linux-6.1, Linux-5.15
In the Linux kernel, the following vulnerability has been resolved: scsi: target: core: Added handling of TMF in tmrlist. An abort that is responded to by iSCSI itself is added to tmrlist, but it does not go to the target core. A LUNRESET that goes through tmrlist takes a refcounter on the abort...
Astra Linux ā Vulnerability in libmodbus
It was discovered that libmodbus v3.1.6 contains a use-after-free issue related to the ctx-backend pointer. This vulnerability allows attackers to trigger a Denial of Service DoS attack by sending a specially crafted message to the unit-test-server...