Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Container Storage Interface (CSI) are now fixed in Storage Scale Container Native 5.2.3.10 / CSI 2.14.9 and Storage Scale Container Native 6.0.1.1 / CSI 3.1.1 or higher

Summary The following vulnerabilities, which can affect IBM Storage Scale Container Storage Interface CSI are now fixed in Storage Scale Container Native 5.2.3.10 / CSI 2.14.9 or higher and Storage Scale Container Native 6.0.1.1 / CSI 3.1.1 or higher. Vulnerability Details CVEID:CVE-2026-14437...

zygote-CVE-2024-31317

Zygote Toolkit - CVE-2024-31317 Ce kit utilise CVE-2024-31317 pour extraire les données privées des applications via ADB ou lancer un shell avec l'UID d'une application. Cette vulnérabilité affecte les versions Android 9 à 14 avec un niveau de correctif de sécurité au 2024-06-01 ou antérieur. Une...

CVE-2026-105438 O2OA General url ActionUploadExcelWithUrl server-side request forgery

A flaw has been found in O2OA up to 10.0.1-ce. This affects the function ActionUploadExcelWithUrl of the file /xgeneralassemblecontrol/jaxrs/excel/upload/with/url of the component General Module. Executing a manipulation of the argument fileUrl can lead to server-side request forgery. The attack...

CVE-2026-78861

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via a hardcoded 512-bit RSA Private Key...

CVE-2026-78860

An issue in Mercusys AC12 V2 allows a local attacker to execute arbitrary code via the storage of information in plaintext...

CVE-2026-105766

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2026-105392

A vulnerability has been found in Lybbn Django-Vue-Lyadmin up to 3.2.12. The impacted element is an unknown function of the file backend/application/settings.py of the component JWT Signing. The manipulation of the argument SECRETKEY leads to use of hard-coded cryptographic key . Remote...

CVE-2026-105389

A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload...

DEBIAN-CVE-2026-104029

A flaw was found in SSSD. A local attacker can exploit this vulnerability by sending a specially crafted request to the autofs responder UNIX socket. Due to improper buffer offset calculation during request parsing, the service performs an out-of-bounds memory read. This flaw can cause the autofs...

CVE-2020-27747

CVE-2020-27747 احتمال الاستيلاء على الحساب | القدرة على الهجوم بالقوة الغاشمة الوصف المقترح تم اكتشاف مشكلة في Click Studios Passwordstate 8.9 Build 8973. إذا قام مستخدم النظام بتعيين رمز PIN لنفسه للدخول من جهاز محمول باستخدام المولد المدمج 4 أرقام، فإن لدى المهاجم عن بعد فرصة لشن هجوم بالقوة...

CVE-2023-1326

CVE-2023-1326 إثبات المفهوم لـ CVE-2023-1326 في apport-cli 2.26.0 هذه الثغرة هي تصعيد صلاحيات في apport-cli 2.26.0، مشابهة لـ CVE-2023-26604، تعمل هذه الثغرة فقط إذا تم التخصيص في sudoers: تم العثور على هجوم تصعيد صلاحيات في apport-cli 2.26.0 والإصدارات السابقة وهو مشابه لـ CVE-2023-26604. إذا تم...

CVE-2026-90007

A flaw was found in the Linux kernel's pm8001 SCSI driver. When pm8001requestmsix attempts to free Message Signaled Interrupts MSI-X vectors, it uses an incorrect index during the rollback process. This error prevents previously registered interrupt handlers from being properly deallocated, leadi...

CVE-2026-90005

A flaw was found in the Linux kernel's Data Access MONitor DAMON sample modules, specifically in how they handle failures during the damonstart operation. An authenticated local attacker with administrative privileges could exploit this by triggering a damonstart failure, leading to a memory leak...

CVE-2026-89837

A flaw was found in the Linux kernel's f2fs filesystem. The findinlevel function, responsible for managing file system entries, fails to release a memory reference dentry folio when an internal error occurs during a call to findinblock. This oversight leads to a memory leak, which can be exploite...

CVE-2026-105766 Chainguard Academy (edu) Nginx directory redirect downgrades HTTPS requests to HTTP

Use of the backend-facing $scheme variable in the trailing-slash directory redirect in nginx.conf of Chainguard Academy edu from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0e50739c225f5aee2e803800a47fc0feb906 allows an on-path network attacker to read or modify documentatio...

CVE-2025-51726

كما طُلب، قمت الآن بعرض كلا الثغرتين BA2022 و BA2015 مع سيناريوهات استغلال عملية ودليل إثبات PoC، مما يوضح كيف يمكن لمهاجم استغلال هذه المشاكل في سياق واقعي. 📌 1. BA2022 تجزئة ضعيفة في توقيع الكود – توضيح استغلال SHA-1 على الرغم من أن الملف الأصلي CyberGhostVPNSetup.exe يظهر كموقّع وموثوق، إلا أن...

security-harness

Security Harness Un harnais de revue de sécurité applicative multi-agents pour Claude Code et, à terme, d'autres agents IA. Une compétence de routage unique dispatche vers un pipeline complet de sécurité offensive qui cartographie une base de code, traque les vulnérabilités avec une base de...

CVE-2026-105389

The feelec-yishu feelcrm-os version 1.0.0 is vulnerable to an unrestricted upload vulnerability within the UploadTicketFile Endpoint . The issue stems from unknown processing in the file App/Feelcrm/Crm/Controller/UploadController.class.php , where manipulation of the cmd argument allows for remo...

CVE-2026-105389 feelec-yishu feelcrm-os UploadTicketFile Endpoint UploadController.class.php unrestricted upload

A security vulnerability has been detected in feelec-yishu feelcrm-os 1.0.0. This issue affects some unknown processing of the file App/Feelcrm/Crm/Controller/UploadController.class.php of the component UploadTicketFile Endpoint. Such manipulation of the argument cmd leads to unrestricted upload...

CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – Évasion de conteneur via le symlink /proc/self/fd Aperçu Un volume partagé monté avec la propagation rshared permet à un conteneur malveillant de créer un lien symbolique pointant vers un fichier hôte via /proc/self/fd. Le processus hôte qui écrit dans le volume suit le lien...