[SECURITY] [DSA 6536-1] thunderbird security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6536-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff October 01, 2026 https://www.debian.org/security/faq -...

cve-2025-59489

Unity CVE-2025-59489 脆弱性検出ツール Android ゲームプラットフォーム専用の Unity Runtime インジェクション脆弱性自動検出ツール。 脆弱性概要 CVE ID : CVE-2025-59489 CVSS スコア : 8.4 High 影響範囲 : Unity 2017.1 以降でビルドされた Android アプリ 公式発表 : https://unity.com/security/sept-2025-01 脆弱性の影響詳細 影響の上限（最悪のケース） 一言でまとめると ：攻撃者は影響を受ける Unity...

CVE-2026-23744-Remote-Code-Execution-POC

CVE-2026-23744 - MCPJam inspector リモートコード実行: 概念実証 POC MCPJam inspector 3. エクスプロイトを実行します python3 exploit.py...

Dissecting-CVE-2026-0628-Chromium-Extension-Privilege-Escalation

= doi.org/10.5281/zenodo.18413764 = orcid.org/0009-0007-7728-256X README.md CVE-2026-0628: Chromium WebView 権限昇格（オリジン偽装）– 技術調査 & 概念実証 著者: Sastra Adi Wiguna Purple Elite Teaming 調査日: 2026年1月 CVE ID: CVE-2026-0628 CVSS v3.1: 8.8 High 影響を受けるバージョン: Chromium 143.0.7499.192 パッチ状況: Chrome...

CVE-2026-47532

A flaw was found in nvidia-driver. A local user with administrative privileges can trigger an out-of-bounds write vulnerability in the driver's kernel mode layer. Successful exploitation may lead to arbitrary code execution, privilege escalation, data tampering, information disclosure, or a Denia...

CVE-2026-47547

A flaw was found in the NVIDIA GPU display driver firmware. Due to improper input validation, a local attacker with elevated privileges can send crafted input to the firmware. Successful exploitation may lead to arbitrary code execution, privilege escalation, or a denial of service DoS...

CVE-2026-47543

A flaw was found in nvidia-driver. The driver's kernel mode layer fails to properly validate input, allowing a local attacker with administrative privileges to supply crafted input. Successful exploitation can lead to arbitrary code execution, privilege escalation, denial of service DoS,...

CVE-2026-47542

A flaw was found in the NVIDIA GPU display driver. A local attacker with high privileges can trigger this vulnerability by supplying crafted input to the kernel-mode driver layer due to improper input validation. A successful exploit may allow the attacker to achieve arbitrary code execution,...

CVE-2026-47538

A flaw was found in the NVIDIA GPU display driver. A local attacker with elevated privileges can trigger an out-of-bounds write vulnerability within the device firmware. Successful exploitation could allow the attacker to execute arbitrary code, escalate privileges, cause a denial of service DoS,...

CVE-2026-47522

A flaw was found in the NVIDIA GPU display driver. Improper input validation within the kernel mode layer allows an authenticated local attacker with elevated privileges to trigger unintended behavior. A successful exploit may lead to arbitrary code execution, denial of service DoS, privilege...

EUVD-2026-91006

A stack-based buffer overflow vulnerability exists in the TDDPv2 service /usr/bin/tddp on Deco M9 Plus due to insufficient validation of decrypted request data length before it is copied into a fixed-size stack buffer in the subtype 0x91 handler. Successful exploitation may allow an adjacent,...

CVE-2026-8618

A stack-based buffer overflow vulnerability exists in the TDDPv2 service (/usr/bin/tddp) on the Deco M9 Plus . The root cause is insufficient validation of the length of decrypted request data before it is copied into a fixed-size stack buffer within the subtype 0x91 handler . An adjacent, unauth...

CVE-2026-20841-PoC

CVE-2026-20841-PoC CVE-2026-20841 の概念実証（Proof of Concept） CVE-2026-20841 – 詳細 CVE-2026-20841 は、Microsoft メモ帳（Notepad）に影響する脆弱性であり、特別に細工された入力によって意図しないコマンド実行が引き起こされる可能性があります。...

CVE-2026-0848-Scanner---Herramienta-de-Detecci-n

🔍 CVE-2026-0848 Scanner NLTK の CVE-2026-0848 脆弱性（StanfordSegmenter における任意コード実行）を検出するためのツールです。 ⚡ インストール git clone https://github.com/tu-usuario/CVE-2026-0848-Scanner.git cd CVE-2026-0848-Scanner pip install -r requirements.txt...

cve-2022-42889-text4shell

Maven 설치 - maven-linux 1. Maven 설치하여 fat jar 생성 mvn clean install 2. Docker 빌드 docker build --tag=text4shell . 3. Docker 실행 docker run -p 80:8080 text4shell 4. 앱 테스트 http://localhost/text4shell/attack?search= 5. 공격은 앞서 언급한 조회lookup에서 접두사prefix를 사용하여 문자열 “$prefix:name”을 전달함으로써 수행할 수 있습니다:...

CVE-2026-47574

A flaw was found in the NVIDIA Virtual GPU vGPU Manager for Linux. A local user with basic privileges can exploit an incorrect transfer of resources across isolation spheres. Successful exploitation could allow an attacker to execute arbitrary code, escalate privileges, cause a denial of service...

CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...

[SECURITY] [DSA 6535-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-6535-1 [email protected] https://www.debian.org/security/ Andres Salomon October 01, 2026 https://www.debian.org/security/faq -...

CVE-2026-23947-PoC

チュートリアル: CVE-2026-23947 - Orval 任意コード実行 このチュートリアルでは、信頼できない OpenAPI 仕様が x-enumDescriptions フィールドと x-enumNames フィールドを介して Orval を悪用し、生成されたクライアントに任意のコードを注入する方法を示します。 前提条件 Node.js v20 または v22 npm セットアップ 1. プロジェクトを作成し、脆弱性のあるバージョンの orval 例: 7.10.0 をインストールします: mkdir orval-poc cd orval-poc npm init -y npm...

CVE-2025-60595

CVE-2025-60595 SPH Engineering UgCS 5.13.0 は、任意コード実行に対して脆弱です。これはCVEサイトで使用される公開リファレンスです。 SPH Engineeringが所有する製品における任意コード実行。UGCS 5.13.0！ Ardupilot/mavparse.py の直接の行、230行目から243行目: SPH EngineeringのGitHubでは、パーサーがXML属性を読み取り、value = evalattrs'value' を設定していることが確認できます。攻撃者が悪意のあるvalue属性（例:...