qyvora-anansi

; & ;; ;& ;;; ;;; ; ;;; ;;; ; ;;; ;;; ; ;; ;;; ;;; ;;;; ;;;; ;;; && ;;; ;;;; ;;;; ;;;; ;;;; ;;;;;;;;;; ;;;; ;;;; ;;;;;;;;; ;;;;;;;;;;;;;;;; ;;;;;;;;; &;;;;;;;;;;;;$x;;;;;;;;;;;; ;;;;;;;;;;&&&+++&&&;;;;;;;;;;; ;;;;;;;;; ;;;&&+&&&&&+&&;;; ;;;;;;;;;; ;;;& ;; ;;;&+&&&&&&&+&&;;; ;; &;;; ;;; ;;;;...

CVE-2026-41091

🛡️ CVE-2026-41091 - RedSun Microsoft Defender Elevation of Privilege Vulnerability RedSun is a local privilege escalation LPE technique and associated PoC abusing a link-following vulnerability in Microsoft Defender's Malware Protection Engine. It allows a low-privileged authenticated attacker to...

CVE-2026-104712

A flaw was found in Apache Struts. An unauthenticated remote attacker could cause a Denial of Service DoS by sending requests with crafted decimal parameters that are rendered through the Struts tag library. Processing these values can produce disproportionately large server responses, enabling a...

GHSA-2MJX-QC3C-RQVC Rustls: TLS 1.3 handshake messages incorrectly accepted across encryption level boundaries

Rustls accepted TLS 1.3 handshake messages sent at the wrong encryption level when they followed a key-changing message in the same record. The handshake transcript is still authenticated, so a network-position attacker cannot use this to alter or complete a handshake; the practical effect is tha...

EUVD-2026-91762

Nx daemon and plugin worker sockets are accessible to other local users...

Nx daemon and plugin worker sockets are accessible to other local users

Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...

GHSA-W3VV-58GJ-GW77 Nx daemon and plugin worker sockets are accessible to other local users

Summary Nx creates the Unix domain sockets for its daemon and its plugin workers in a shared temporary directory with default permissions, so any other user on the same machine can connect to them. The daemon accepts a PROCESSINBACKGROUND request that names a module to load and invokes its defaul...

CVE-2011-2523

CVE-2011-2523 — vsftpd 2.3.4 Backdoor Exploit Overview vsftpd Very Secure FTP Daemon is an FTP server for Unix-like platforms including Linux, distributed under the GNU General Public License. In July 2011, it was discovered that vsftpd version 2.3.4 — available for download between June 30 and...

CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-105471 girishsaraf Online-Appointment-Booking-System Registration signup.php sql injection

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanner A multi-threaded vulnerability scanner for CVE-2026-50751 , a critical IKEv1 authentication bypass vulnerability affecting Check Point Quantum Security Gateways. Overview Check Point Remote Access VPN systems with IKEv1 enabled are vulnerable to...

NetLogic

NetLogic Cloud-Native Attack Surface Mapper & Vulnerability Correlator — v3.0 NetLogic is a network security platform combining active port scanning, CVE correlation live NVD API, SSL/TLS analysis, HTTP security auditing, DNS/email security assessment, subdomain takeover detection, passive OSINT,...

[slackware-security] cups

New cups packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/cups-2.4.20-i586-1slack15.0.txz: Upgraded. This update fixes security issues: The scheduler did not open temporary PPD files in exclusiv...

gradient-untangler

gradient-untangler A local research harness that searches for the exact tokens that make an open-weight language model start its answer the way you specify. Open-weight models ship as ordinary files: config.json, a tokenizer, and one or more .safetensors or .bin shards. A Hugging Face id is only ...

CVE-2026-14960-CVE-2026-14961

Privilege Escalation Vulnerabilities in Pegatron TdeIo64 Driver tdeio64.sys | ---|--- CVE IDs| CVE-2026-14960, CVE-2026-14961 Vendor| Pegatron Corporation Product| TdeIo Driver tdeio64.sys Device Interface| \.\TdeIo Vulnerability Types| Improper Access Control CWE-284, Arbitrary Kernel Memory...

CVE-2022-38601

Suggested description Lotsia Soft Lotsia PDM PLUS v5.80.220414 was discovered to contain a buffer overflow. Vulnerability Type Buffer Overflow Vendor of Product Lotsia Soft Affected Product Code Base Lotsia PDM PLUS - 5.80.220414 Attack Type Local Impact Code execution true Impact Denial of Servi...

EUVD-2026-91057

stream-json has a prototype pollution issue: Assembler writes this.currentthis.key on plain objects...

CVE-2025-25621

CVE-2025-25621 Unifiedtransform v2.0 معرّض لثغرة التحكم غير الصحيح في الوصول، مما يسمح للمعلمين بتسجيل حضور زملائهم المعلمين من خلال المسار /courses/teacher/index?teacherid=2&semesterid=1. البائع: Unifiedtransform PoC الخطوة 1: سجّل الدخول إلى التطبيق بصفة معلّم. الخطوة 2: انتقل إلى المسار...

CVE-2026-105468

A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...

CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection

A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...