CVE-2026-94201

The ash: library (versions 3.5.1 before 3.34.3) is vulnerable to a denial of service (DoS) attack due to how it handles :atom-typed attributes. When an attribute is configured with unsafe_to_atom?: true, filtering that attribute with attacker-controlled strings causes the system to intern new, pe...

EUVD-2026-92768

Ash stores :atom-typed attributes as strings and compares them as strings. When such an attribute is referenced in a filter, the comparison value is coerced through Ash.Type.Atom. Because the type defined no coerce/2 callback, coercion fell back to the default castinput/2, which calls...

google_gax

googlegax 패치됨 Tesla = 1.18.3과의 호환성을 위한 googlegax v0.4.1의 패치된 포크입니다. 이 포크가 존재하는 이유 Tesla 1.18.32026년 6월 2일은 CVE-2026-48598에 대한 보안 수정의 일환으로 assertquotedstringsafe!/2를 통해 멀티파트 필드 이름에 대한 엄격한 검증을 도입했습니다. 업스트림 googlegax마지막 릴리스: 2021, 유지보수 중단됨는 원자:metadata, :data를 멀티파트 필드 이름으로 전달하며, 이제 Tesla는 이를...

Stagefright-cve-2015-1538-1

Stagefright-cve-2015-1538-1 Joshua J. Drake @jduck（ZIMPERIUM zLabs）により発見され、Niranjan Shrestha @niranjanshr13 によりプロジェクトが修正されました。 RCE脆弱性CVE-2015-1538 1のエクスプロイト libstagefright MP4 'stsc' アトム処理における整数オーバーフロー 忘れないでください、"createmp4" の出力は様々な方法で配信可能です！ MMSが最も危険な攻撃ベクトルですが、それだけではありません... 免責事項:...

MicrocodeDecryptor

고지 사항 모든 정보는 교육 목적으로만 제공됩니다. 이 지침을 따르는 것은 사용자 본인의 책임입니다. 저자나 고용주는 이 페이지에 포함된 정보에 근거하여 행동하거나 행동하지 않은 개인 또는 조직에서 발생하는 직접적 또는 결과적 손해나 손실에 대해 책임을 지지 않습니다. 설명 2020년 초, 우리는 Intel Atom Microcode를 추출할 수 있는 Red Unlock 기법을 발견했습니다. 우리는 마이크로코드의 내부 구조와 x86 명령어 구현을 조사할 수 있었습니다. 또한, 마이크로코드를 보호하는 데 사용되는 마이크로코드...

Atom CMS v2.0 - Cross-Site Scripting

Atom CMS v2.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the "A" parameter in /widgets/debug.php. id: CVE-2022-25489 info: name: Atom CMS v2.0 - Cross-Site Scripting author: theamanrawat severity: medium description: | Atom CMS v2.0 was discovered to contain ...

Atom CMS v2.0 - Remote Code Execution

Atom CMS v2.0 was discovered to contain a remote code execution RCE vulnerability via /admin/uploads.php. id: CVE-2022-25487 info: name: Atom CMS v2.0 - Remote Code Execution author: theamanrawat severity: critical description: | Atom CMS v2.0 was discovered to contain a remote code execution RCE...

Atom CMS v2.0 - SQL Injection

AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php. id: CVE-2022-24223 info: name: Atom CMS v2.0 - SQL Injection author: theamanrawat severity: critical description: | AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php...

[SECURITY] Fedora 45 Update: newsboat-2.44-3.fc45

Newsboat is a fork of Newsbeuter, an RSS/Atom feed reader for the text consol e...

CVE-2026-66071

A flaw was found in rabbitmq-server where its OAuth2 authentication backend improperly converts token scope values into Erlang runtime atoms. In deployments where an Identity Provider IdP allows users to influence scope contents within their signed JSON Web Tokens JWTs, an authenticated attacker...

RabbitMQ 4.2.x < 4.2.9 / 4.3.x < 4.3.3 Atom Exhaustion via Shovel Management Endpoint

The version of RabbitMQ installed on the remote host is 4.2.x prior to 4.2.9, or 4.3.x prior to 4.3.3. It is, therefore, affected by a denial of service vulnerability: - The Shovel parameter parser converts attacker-controlled runtime parameter values such as the src-protocol, dest-protocol, and...

RabbitMQ 4.0.x < 4.0.22 / 4.1.x < 4.1.14 / 4.2.x < 4.2.7 / 4.3.x < 4.3.1 Atom Exhaustion via Global Parameter Name

The version of RabbitMQ installed on the remote host is 4.0.x prior to 4.0.22, or 4.1.x prior to 4.1.14, or 4.2.x prior to 4.2.7, or 4.3.x prior to 4.3.1. It is, therefore, affected by a denial of service vulnerability: - resourceexists/2, and the PUT and DELETE handlers, call...

Atom-CMS-2.0---File-Upload-Remote-Code-Execution-Un-Authenticated-POC

Atom-CMS-2.0---파일-업로드-원격-코드-실행-비인증- 원격 코드 실행 RCE Exploit 작성자: Ashish Koli Shikari 공급업체 홈페이지: https://thedigitalcraft.com/ 소프트웨어 링크: https://github.com/thedigicraft/Atom.CMS 버전: 2.0 CVE: CVE-2022-25487 설명: 이 스크립트는 Atom CMS에 webshell.php를 업로드합니다. 애플리케이션은 해당 파일을 저장하며, uploads 디렉터리의 고유 번호를 통해 Webshel...

BIT-RABBITMQ-2026-67415 RabbitMQ: Shovel Management Atom Exhaustion Allows Persistent Broker-Wide Denial of Service

RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.9 and 4.3.3, the Shovel parameter parser converted attacker-controlled runtime parameter values into non-garbage-collected Erlang atoms before bounding them or checking a fixed allowlist. Exploitation requires network access to th...

BIT-RABBITMQ-2026-67238 RabbitMQ: Atom-table exhaustion via reply-to queue name decoding

RabbitMQ is a messaging and streaming broker. Prior to versions 4.2.7 and 4.3.1, rabbitpidcodec:decomposefrombinary/1 parses a caller-supplied ETF-encoded binary and calls binarytoatomNode, utf8 on the node-name field. It is reached from rabbitvolatilequeue:pidfromname/2, which is invoked for any...

BIT-RABBITMQ-2026-67227 RabbitMQ: Atom exhaustion: to_atom on global-parameter :name

RabbitMQ is a messaging and streaming broker. From 4.0.0 until 4.0.22 and 4.1.14 and 4.2.7 and 4.3.1, Atom exhaustion: toatom on global-parameter :name. resourceexists/2 and the PUT/DELETE handlers call rabbitdatacoercion:toatom/1 on the :name URL path segment. toatom/1 uses binarytoatom/2 unsafe...

BIT-RABBITMQ-2026-67220 RabbitMQ: JMS topic exchange erl_scan atom exhaustion

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, 4.3.0, When a binding is created on an x-jms-topic exchange, addbinding/3 reads the rjmserlangselector argument and passes it through erlscan:string/1 then erlparse:parseterm/1. erlscan:string/1 intern...

BIT-RABBITMQ-2026-66072 RabbitMQ: Atom table exhaustion via stream `chunk_selector`

RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, getchunkselector/1 calls binarytoatom on the raw client-supplied property from post-auth subscribe and resolveoffsetspec frames, with no whitelist and no existing guard. An authenticated...

BIT-RABBITMQ-2026-66071 RabbitMQ: Atom exhaustion: OAuth2 JWT tag: scope values

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.22 and 4.1.11 and 4.2.6 and 4.3.1, Atom exhaustion: OAuth2 JWT tag: scope values. extractscopes/1 parses scopes of the form .tag: and calls rabbitdatacoercion:toatom to convert to a tag atom. The token signature is...

SUSE CVE-2026-66073

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.15 and 4.0.20 and 4.1.11 and 4.2.6, Atom table exhaustion via management API node field. pUT /api/queues/:vhost/:name and the exchanges and bindings endpoints accepts a node JSON field. The value goes through rabbitnodes:make -...