Important: kernel-rt security, bug fix, and enhancement update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: Linux kernel: Use-after-free in xc5000 tuner driver due to race condition CVE-2025-39994 kernel: gfs2: Fix unlikely race in...

CVE-2026-105697: Improper Neutralization of Special Elements used in an OS Command

Langflow is a tool for building and deploying AI-powered agents and workflows. Before Langflow 1.10.3, the MCP stdio transport launched whatever command / args a user put in an MCP server configuration, with no allowlist and before 1.10.3 wrapped in bash -c "exec command ...". Any user able to...

CVE-2026-88395: Improper Neutralization of Special Elements used in an SQL Command

GouGuOA v6.0.5 and before is vulnerable to SQL Injection in /home/message/rubbish via the keywords parameter...

Cisco ASA Command Injection (CVE-2021-1488)

A vulnerability in the upgrade process of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system OS. This...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0344-1 Rating: critical References: 1283262 Cross-References: CVE-2026-102299 CVE-2026-102300 CVE-2026-102301 CVE-2026-102302 CVE-2026-102303 CVE-2026-102304 CVE-2026-102305 CVE-2026-102306 CVE-2026-102307...

...[ More ]

There is a critical authentication bypass vulnerability residing within Kestra OSS's core request-filtering mechanism. Due to insecure suffix-matching logic instead of strict routing or exact segment validation, attackers can craft custom request paths that bypass security controls. This allows...

...[ More ]

Apache Submarine retired to the Apache Attic suffers from an authentication bypass leading to unauthenticated remote code execution. The security filter CommonFilter.isProtectedApi treats any request whose User-Agent header matches the Python SDK pattern as not requiring authentication, and the...

ROS-20261005-73-0144

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver exposes confidential or sensitive information in error messages from the command shell. Exploiting this vulnerability could allow an attacker t...

CVE-2026-16723

CVE-2026-16723 寄付 PayPalまたは下のQRコードをスキャンして、このプロジェクトの維持をサポートしてください。 ⚡ 簡単な使い方 このプロジェクトは、以下のような安全かつ許可された環境でのみ使用してください： ローカル仮想マシン Dockerコンテナ 隔離されたラボ環境 許可されたペネトレーションテスト環境 セットアップ例： git clone https://github.com/HORKimhab/CVE-2026-16723 cd CVE-2026-16723 Download fastjson JAR optional - script will...

veneficus

@abraxasnull · [email protected] · abraxaslabs.tech · github.com/abraxas/veneficus クレジット: @YoSoth0 Veneficus Mini v3.0 Windows 10/11 x64 インプラントキット: PowerShell ステージャー 、Rust PE 、そして Telegram でオペレーターに通知する Cloudflare Worker 。 ステージャー resources/loader.ps1 は、現在の PowerShell プロセスで AMSI を無効化し、Worker の...

CVE-2019-19203

CVE-2019-19203 Oniguruma 6.x 6.9.4rc2 より前 で問題が発見されました。ファイル gb18030.c の関数 gb18030mbcenclen において、UChar ポインタが、マッチした文字列の末尾を超えていないかチェックせずに参照解除されます。これにより、ヒープベースのバッファオーバーリードが発生します。 研究者: ManhND The Tarantula Team、VinCSS Vingroup のメンバー Oniguruma とは K. Kosako による Oniguruma は、BSD...

xzwhy

xzwhy / / / / \ / /\ 이 프로젝트는 XZ Utils에 영향을 미치는 CVE-2024-3094에 대한 Kubernetes 친화적인 개념 증명POC입니다. 해당 익스플로잇의 기원과 메커니즘에 대한 훌륭한 설명은 이 글을 참조하세요. 경고 ⚠⚠⚠ 아래 명령어를 실행하면 공격에 매우 취약한 애플리케이션이 배포될 수 있습니다. 이 단계를 따르기로 결정했다면, 반드시 에어갭 테스트 환경에서만 실행하는 것을 권장합니다. ⚠⚠⚠ 사용 설명 1: 취약한 애플리케이션 배포 kubectl create -f xzwhy.yml 이...

mav-raiders

MAV Raiders Security Analysis and Exploitation of MAVLink-B...

SwordStamp

SwordStamp SwordStamp adds order-robust detection and semantic-span units to embedding-based semantic watermarks. This artifact contains the exact paper configuration, generation and detection code, the unchanged attack suite, quality evaluation, and deterministic result extraction and plotting...

CVE-2020-5903

CVE-2020-5902 RCE /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=delete+cli+alias+private+list /tmui/login.jsp/..;/tmui/locallb/workspace/tmshCmd.jsp?command=create+cli+alias+private+list+command+bash...

CVE-2026-61500

CVE-2026-61500：Rejetto HFS 会话伪造导致 RCE CVE-2026-61500 是 Rejetto HFS 3.0.0 至 3.2.0 中的一个未认证会话伪造漏洞。HFS 使用 JavaScript Math.random 生成其 Koa 会话 cookie 签名密钥，并在未认证的 SRP 登录握手中暴露了来自同一 V8 PRNG 的输出。攻击者可以重建 PRNG 状态、恢复签名密钥、伪造管理员会话，并利用文档中记载的 servercode 配置功能执行服务端 JavaScript。 本仓库包含一个 Python 概念验证，以及使用官方 HFS 3.2.0 和...

CVE-2026-4480

🚨 CVE-2026-4480 - 삼바 인쇄 서브시스템의 중요 원격 코드 실행 원격 코드 실행 RCE 삼바 인쇄 명령 주입 취약점 "하나의 인쇄 작업 이름이 쉘 명령이 되어서는 안 됩니다." 📖 개요 CVE-2026-4480 는 삼바의 인쇄 서브시스템에 영향을 미치는 중요한 명령 주입 취약점입니다. 특정 구성에서 삼바는 사용자 제어 인쇄 작업 이름%J을 충분한 정제 없이 쉘 명령에 전달하여, 공격자가 영향을 받는 서버에서 임의의 명령을 실행할 수 있게 할 수 있습니다. 🎯 취약점 세부 정보 필드| 값 ---|--- CVE ID|...

Malicious code in hardhat-ftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e916c23a0efbd49d3cfcd5993957df7afbade3f454925d0672acc8c9f68245c The package's declared main entry index.js unconditionally requires./lib/config, a 4,499,968-byte obfuscator.io-packed file 26,234-entry string array...

MAL-2026-17506 Malicious code in hardhat-ftp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5e916c23a0efbd49d3cfcd5993957df7afbade3f454925d0672acc8c9f68245c The package's declared main entry index.js unconditionally requires./lib/config, a 4,499,968-byte obfuscator.io-packed file 26,234-entry string array...

Malicious code in internallib_v275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c1c6d383b3defb01da235e39e08ce56276d887e63d900aea2ee689836f71b4 index.js exports a command function that invokes /bin/bash -c to curl a reverse-shell payload from reverse-shell.sh targeting the hardcoded host...