CVE-2021-38297-Go-wasm-Replication

🚨 Sfruttare CVE-2021-38297: Un Viaggio nel Buffer Overflow di GO Wasm 🚨 🌐 Panoramica della Vulnerabilità 🌐 WebAssembly WASM 🌍, un formato di istruzioni binarie all'avanguardia, consente l'esecuzione fluida di linguaggi ad alto livello come C, C++, Rust e GO nei browser web moderni. Tuttavia, la...

CVE-2026-81715

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

EUVD-2026-67065

opensslencrypt pip package openssl-encrypt versions = 1.4.8 do not redact the keyserver bearer token passed as the positional argument to 'keyserver set-token' in the --debug argv dump, because sanitizeargvfordebug fails to sanitize it. As a result the token is printed in cleartext to stderr unde...

CVE-2026-81715

openssl_encrypt (pip package openssl-encrypt ) versions ≤ 1.4.8 leak a keyserver bearer token in cleartext to stderr when the --debug flag is active. The root cause is that sanitize_argv_for_debug fails to redact the token passed as the positional argument to the keyserver set-token command. Beca...

CVE-2026-81705 openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug

openssl-encrypt before 1.4.9 fails to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings e.g. -apHunter2 or abbreviated long-option spellings e.g. --passw. The sanitizer only recognized exact option names, --option=value forms, and...

CVE-2026-81705

openssl-encrypt versions before 1.4.9 fail to redact the file password in its --debug argv dump when the password is supplied via bundled short-option spellings (e.g., -apHunter2) or abbreviated long-option spellings (e.g., --passw). The sanitizer only recognized exact option names, --option=valu...

codeql-sample-polkit

-- coding: utf-8 - - Il bug di polkit pkexec Panoramica Questo repository esamina il bug di polkit pkexec usando CodeQL. Contiene istruzioni per la creazione dei database i database risultanti una sequenza di query che illustrano un approccio per trovare questo bug Questi sono stati completati: l...

CVE-2021-38297

Sfruttamento di CVE-2021-38297: Vulnerabilità di buffer overflow in GO Wasm Panoramica della vulnerabilità WebAssembly WASM funge da formato di istruzioni binarie eseguibile nella maggior parte dei browser moderni. Agisce come target di compilazione per vari linguaggi ad alto livello come C, C++,...

CVE-2026-46529

RCE durch PDF-argv-Injection CVE-2026-46529 atril/xreader/evince Funktionierender Proof-of-Concept für die argv-Injection in evspawn shell/ev-application.c. Ein einzelner Klick irgendwo auf der gerenderten Seite eines manipulierten PDFs löst eine beliebige Codeausführung als der Benutzer aus, der...

CVE-2021-4034

CVE-2021-4034 Lokale Privilegienausweitung via pkexec YouTube-Video Schau dir das ✨ YouTube-Video an Lokal ausführen root@kitploit: make all && ./pwnkit && make clean In Docker ausführen root@kitploit: Das Docker-Image erstellen docker build -t pwnkit . Den Exploit ausführen docker run -it pwnkit...

CVE-2024-52301

إثبات المفهوم CVE-2024-52301 تعتمد هذه الثغرة على الثغرة CVE-2024-50340 المتطلبات يجب تمكين خيار registerargcargv في ملف إعدادات PHP php.ini. يقوم هذا الإعداد بتحميل وسائط سطر الأوامر ومعاملات الاستعلام إلى $SERVER'argv'. https://www.php.net/manual/en/ini.core.phpini.register-argc-argv شرح الكود...

Important: Red Hat Security Advisory: evince security update

An update for evince is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

RHEL 8 : evince (RHSA-2026:42692)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:42692 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

RHEL 7 : evince (RHSA-2026:41904)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:41904 advisory. The evince packages provide a simple multi-page document viewer for Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS files,...

CVE-2026-9494

An information disclosure vulnerability exists in Canonical ubuntu-pro-client formerly ubuntu-advantage-tools. The client validates Ubuntu Pro APT credentials by executing /usr/lib/apt/apt-helper using the download-file command. During this process, the secret bearer token is embedded directly in...

CVE-2026-47767

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...

CVE-2026-47767

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...

CVE-2026-47767

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...

CVE-2026-47767 Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...

CVE-2026-47767 Symfony: SymfonyRuntime CVE-2024-50340 Patch Bypass: Web Requests Can Still Set APP_ENV/APP_DEBUG via parse_str/SAPI Argv Mismatch

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 5.4.46 until 5.4.52, 6.4.40, 7.4.12, and 8.0.12, the CVE-2024-50340 fix gated runtime argv parsing on empty$GET, but parsestr and the web SAPI can disagree, allowing a crafted query string to...