cve-2022-42889-intercept

cve-2022-42889-intercept Версии ниже Java 11 требуют внимания: в более новых версиях интерпретатор Javascript уже удалён. Данное решение предназначено для Java 8. Перехват недопустимых аргументов через параметры запуска JVM и PID через jps. Быстрый старт -----------------------load...

shouganaiyo-loader

shouganaiyo-loader : entrée forcée pour les agents Java shouganaiyo-loader est un outil en ligne de commande Node.js multiplateforme basé sur Frida qui force les processus Java à charger un agent Java/JVMTI, que la JVM ait ou non désactivé l'API d'attachement des agents. Installation $ sudo npm...

CVE-2026-67401

CVE-2026-67401 Injection SQL dans cPanel EmailTrack. Un utilisateur cPanel authentifié disposant de privilèges de messagerie écrit des fichiers arbitraires en tant que root via SQLite ATTACH DATABASE. Une seule requête vers root. Non testé sur une cible réelle, le code est uniquement assemblé à...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS : Ubuntu Pro for WSL vulnerability (USN-8892-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-8892-1 advisory. Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL...

USN-8892-1: Ubuntu Pro for WSL vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

USN-8892-1 wsl-pro-service vulnerability

Darshan U discovered that Ubuntu Pro for WSL exposed the attach token in command-line arguments when enabling a subscription on a WSL instance. An attacker could possibly use this issue to obtain sensitive information and gain unauthorized access to Ubuntu Pro repositories...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: net: atm: Added lecmutex. The issue was discovered in net/atm/lec.c, and it was found that there is an error path in lecdattach, which may lead to a dangling pointer in devlec. A mutex was added to protect the usage of devlec...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: media: rc: The bpf attach/detach operation requires write permission. source-iocs-preserved const=CAPNETADMIN...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bpf: Enforce expectedattachtype for tailcall compatibility Yinhao et al. recently reported: Our fuzzer tool discovered an uninitialized pointer issue in the bpfprogtestrunxdp function within the Linux kernel’s BPF subsystem. This...

xerial__sqlite-jdbc_CVE-2023-32697_3-41-2-1

Pilote JDBC SQLite SQLite JDBC est une bibliothèque pour accéder et créer des fichiers de base de données SQLite en Java. Notre bibliothèque SQLiteJDBC ne nécessite aucune configuration car les bibliothèques natives pour les principaux systèmes d'exploitation, y compris Windows, macOS, Linux, etc...

CVE-2026-104450

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

CVE-2026-104450 YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

EUVD-2026-91461

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

CVE-2026-104450

YesWiki versions before 4.6.7 are vulnerable to a missing authorization flaw in the pointimage action (tools/attach/actions/pointimage.php ). This flaw allows unauthenticated attackers to bypass write Access Control List (ACL) checks by sending POST requests with pagetag, title, and description f...

CVE-2026-104450 YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

CVE-2026-104450 YesWiki before 4.6.7 ACL Bypass and Stored XSS via pointimage Action

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

CVE-2026-104450: Improper Neutralization of Input During Web Page Generation

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

PT-2026-104260

YesWiki before 4.6.7 contains a missing authorization flaw in the pointimage action tools/attach/actions/pointimage.php, which saves content to an attacker-chosen page with write ACL checks bypassed. Unauthenticated attackers can POST pagetag, title, and description fields to any page rendering...

CVE-2026-102371

In wsl-pro-service before 0.1.19ubuntu3, the service component which runs as root inside each WSL instance attaches the instance to Ubuntu Pro by executing the pro client with the Ubuntu Pro token passed as a command-line argument pro attach . On systems where /proc is mounted without...

PT-2026-102631

Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attach ids parameter of the file attachment download endpoint that allows remote attackers to extract arbitrary database contents without prior authentication. Attackers can inject...