Security Bulletin: Due to the use of IBM Db2, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Vulnerabilities found in IBM Db2 LUW that affect Foundation and IBM Tivoli Monitoring ITM pattern Types pTypes shipped with IBM Cloud Pak System. Vulnerabilities were addressed in IBM Cloud Pak System v2.3.5.1. IBM Cloud Pak System provides IBM Db2 with BLU Acceleration Pattern 1.2.26.0...

nextjs-CVE-2025-55182

CVE-2025-55182 / CVE-2025-66478 React2Shell - Next.js Remote Code Execution RCE Proof of Concept Next.js सर्वर एक्शन में गंभीर भेद्यता जो React Flight प्रोटोकॉल डीसीरियलाइज़ेशन के माध्यम से बिना प्रमाणीकरण के दूरस्थ कोड निष्पादन की अनुमति देती है अवलोकन इस रिपॉजिटरी में Next.js एप्लिकेशन के लिए ए...

CVE-2025-55182

CVE-2025-55182 - उपकरण React2Shell React2Shell Ultimate Scanner v2.0 पेशेवर Next.js RSC RCE भेद्यता स्कैनर CVE-2025-66478 के लिए 🎯 अवलोकन React2Shell Ultimate, CVE-2025-66478 के लिए एक व्यापक भेद्यता स्कैनर है - यह एक महत्वपूर्ण रिमोट कोड निष्पादन RCE भेद्यता है जो React Server Components RSC का...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

Research on Vivo iQOO Neo 9 Rooting CVE-2025-21479 This pro...

RCE-Simplephpblog-biggiedroid

CVE-2025-15495 - Arbitrary File Upload Leading to Remote Code Execution RCE Product BiggiDroid – Simple PHP Blog CMS Product page: https://biggidroid.com/product/simple-php-blog/ Vulnerability Type Arbitrary File Upload Unrestricted File Upload Remote Code Execution RCE Severity Critical CVSS...

CVE-2019-19204

CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة خارج حدود المخزن المؤقت المخصص على الكومة heap-based buffer over-read...

CVE-2022-26134-Exploit-Detection

Confluence RCE CVE-2022-26134 शोषण पहचान पूर्व-आवश्यकताएँ 1. ClamAV इस रिपॉजिटरी को क्लोन करें या अपने कॉन्फ्लुएंस सर्वर पर Yara नियम डाउनलोड करें हम volexity/threat-intel द्वारा प्रदान किए गए Yara नियम का उपयोग कर रहे हैं, जिन्होंने सबसे पहले इस कमजोरी का खुलासा किया। Git Clone git clone...

CVE-2026-10817

CVE-2026-10817 تبرع ساعد في الحفاظ على هذا المشروع إذا وجدت هذا المشروع مفيدًا، فيرجى التفكير في دعم صيانته المستمرة من خلال PayPal أو ABA Mobile. ❤️ ១០% នៃការបរិច្ចាគរបស់អ្នក នឹងត្រូវបានបរិច្ចាគជូនមន្ទីរពេទ្យគន្ធបុប្ផា។ ❤️ يتم التبرع بعشرة بالمائة من كل تبرع لمستشفى كانتا بوفا للأطفال. | اختر...

python: Python: CPU Denial of Service in HTML parser via repeated unterminated markup declarations

A flaw was found in Python. Its incremental HTML parser can be exploited by a remote attacker. By sending specially crafted, uncontrolled data with repeated, incomplete markup declarations, the attacker can cause the system to consume excessive central processing unit CPU resources. This leads to...

cpython: Python HTMLParser quadratic complexity

A denial-of-service DoS vulnerability has been discovered in Python's html.parser.HTMLParser class. When processing specially malformed HTML input, the parsing runtime can become quadratic with respect to the input size. This significantly increased processing time can lead to excessive resource...

python: Quadratic complexity in os.path.expandvars() with user-controlled template

A vulnerability in Python’s os.path.expandvars function that can cause performance degradation. When processing specially crafted, user-controlled input with nested environment variable patterns, the function exhibits quadratic time complexity, potentially leading to excessive CPU usage and denia...

K000163557: Linux kernel vulnerability CVE-2026-43313

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: ACPI: processor: Fix NULL-pointer dereference in acpiprocessorerratapiix4 In acpiprocessorerratapiix4, the pointer dev is first assigned an IDE device and then reassigned an ISA device: dev =...

[SECURITY] [DSA 6548-1] node-shell-quote security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6548-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 06, 2026 https://www.debian.org/security/faq -...

Codeguard-copilot

CodeGuard Copilot — نظام أمني بيئي ذكي حارسك الأمني المدعوم بالذكاء الاصطناعي — متصل الآن بذكاء المهاجمين المباشر الميزات • البنية المعمارية • تكامل Raven • التثبيت • خارطة الطريق • المساهمة ما هو CodeGuard Copilot؟ يكتشف CodeGuard Copilot الثغرات الأمنية أثناء كتابتك للكود ، وليس بعد إجراء الـ...

shakuni

Shakuni A local-first, safety-gated workspace and toolkit for...

CVE-2026-79815

A command injection vulnerability in the OnGuard agent of ClearPass Policy Manager could allow an authenticated remote attacker to inject arbitrary commands. Successful exploitation could allow an attacker to execute commands with elevated privileges on the affected Windows endpoint...

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

CVE-2026-79802

A command injection vulnerability exists in the client software of ClearPass Policy Manager. Successful exploitation could allow an attacker who is able to supply crafted input to the affected software to execute arbitrary commands with elevated privileges on the affected host...

CVE-2026-79803

A command injection vulnerability exists in the API of ClearPass Policy Manager. Successful exploitation could allow an authenticated remote attacker to escalate privileges and gain administrative control of the affected system...

CVE-2026-102160

An operating system OS command injection vulnerability in CloudVision CUE backup management may allow an authenticated Super User to submit a crafted backup request and execute arbitrary commands with the privileges of the affected service...