301136 matches found
Moderate: Red Hat Security Advisory: firewalld security update
An update for firewalld is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
CVE-2026-106105
The Quasar Framework contains a vulnerability where the @quasar/ssl-certificate utility caches combined private keys and certificates without applying owner-only filesystem permissions . This occurs in versions prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0....
CVE-2026-95153
An issue in Bludit CMS 3.22.0 allows a remote attacker to obtain sensitive information via the /admin/ajax/clippy and /admin/ajax/save-as-draft endpoints...
CVE-2022-46169
CVE-2022-46169 Instalación git clone https://github.com/miko550/CVE-2022-46169.git cd CVE-2022-46169 Uso usage: CVE-2022-46169.py -h -t TARGET -l LIST options: -h, --help show this help message and exit -t TARGET, --target TARGET The URL of the target, eg: http://127.0.0.1 -l LIST, --list LIST Li...
CVE-2022-20818
CVE-2022-20818: Escalada de privilegios local mediante lectura parcial de archivos en Cisco SD-WAN La función “config - load” del shell SSH de Viptela utiliza “wget” para obtener archivos “command” remotos a través de FTP. Al alojar un servidor FTP malicioso y reemplazar los archivos locales...
USN-8890-1 libsoup2.4, libsoup3 vulnerabilities
It was discovered that libsoup incorrectly handled certain HTTP/2 requests. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-4271 It was discovered that libsoup incorrectly handled certain HTTPS...
CVE-2026-45585
🔑 CVE-2026-45585 - YellowKey 🔓 针对 CVE-2026-45585 YellowKey 的高级缓解措施 📌 什么是 YellowKey 漏洞？ YellowKey （CVE-2026-45585）是一个于 2026 年 5 月发现的零日物理攻击 漏洞，允许拥有物理访问权限 的攻击者完全绕过 Windows 11 设备上的 BitLocker 加密 — 无需 PIN、密码或恢复密钥。 攻击原理： 攻击者将设备启动到 WinRE （Windows 恢复环境） 使用特制的、包含 NTFS 事务日志（FsTx）的 USB 设备 利用 autofstx.exe...
CVE-2026-76105
Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-105950
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...
dnsmasq-cve-2026
Herramienta de Verificación QA para dnsmasq CVE-2026 Herramienta automatizada de caja negra para verificar 6 vulnerabilidades de dnsmasq mayo de 2026. Envía paquetes de ataque a un DUT en vivo e informa PASS/FAIL — sin necesidad de acceso al código fuente. Inicio rápido Configure el DNS del DUT c...
CVE-2026-55168
CVE-2026-55168 Este repositorio contiene un PoC simple para CVE-2026-55168 en Runtipi. El problema es una escritura arbitraria de archivos autenticada que se puede alcanzar a través del flujo de restauración de copias de seguridad. Un archivo de copia de seguridad manipulado puede colocar un enla...
CVE-2026-105950 getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...
CVE-2026-105950
The getformwork formwork component, in versions up to 2.3.12 , is vulnerable to cross-site scripting (XSS) due to an issue in the URI Sanitizer component. Specifically, the DomSanitizer::sanitizeNodeAttribute function located in formwork/src/Sanitizer/DomSanitizer.php fails to properly handle the...
CVE-2026-105950 getformwork URI Sanitizer DomSanitizer.php sanitizeNodeAttribute cross site scripting
A security vulnerability has been detected in getformwork formwork up to 2.3.12. Impacted is the function DomSanitizer::sanitizeNodeAttribute of the file formwork/src/Sanitizer/DomSanitizer.php of the component URI Sanitizer. Such manipulation of the argument formaction leads to cross site...
CVE-2026-63689
Dell Container Storage Modules, versions prior to 1.18.0, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-105921
A vulnerability was identified in Kusalkasilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2. This affects an unknown function of the file searchclass.php. Such manipulation of the argument schoolyear leads to sql injection. The attack may be launched remotely. The...
openssh: Local MITM of X11 forwarding via abstract UNIX socket pre-binding in Red Hat Enterprise Linux OpenSSH client versions
A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by pre-binding the preferred abstract X socket name when X11 forwarding is enabled and a local UNIX-domain X socket is used. A successful attack ca...
EUVD-2026-93459
Dell Container Storage Modules, versions prior to 1.18.0 contains an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
EUVD-2026-93437
Dell Container Storage Modules, versions prior to 1.18.0, contains an Use of Hard-coded Credentials vulnerability in the CSM Authorization. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
samsung-bixby-command-execution-cve-2026-21055-improper-component-export
CVE-2026-21055 PoC — Exportación Incorrecta de Componentes de Samsung Bixby Prueba de concepto para CVE-2026-21055 : La exportación incorrecta de componentes de aplicaciones Android en Samsung Bixby anterior a la versión 4.0.70.8 permite a atacantes locales ejecutar comandos arbitrarios con...