Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Media Router of Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass the same-origin policy through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect reference resolution in the Loader component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass web origin policies through crafted network traffic. Chromium security severity: Medium...

CVE-2025-27591

CVE-2025-27591 Exploit de Prova de Conceito para Escalação de Privilégios no Below v0.9.0 Aviso Legal Este exploit é destinado apenas para fins educacionais. Ele foi projetado para ajudar os usuários a entender vulnerabilidades de segurança e melhorar seu conhecimento em cibersegurança. O autor n...

skill-safety-bench

SkillSafetyBench SkillSafetyBench एक पूर्ण रूप से मूर्त fully materialized बेंचमार्क है जो कौशल-उन्मुख संदर्भ skill-facing context पर हमलों के कारण होने वाली सुरक्षा विफलताओं का मूल्यांकन करता है। प्रत्येक मामले में उपयोगकर्ता-उन्मुख कार्य सामान्य रहता है, जबकि हमला स्थानीय कौशल, सहायक स्क्रिप्ट,...

CVE-2026-105290

A vulnerability was determined in feelec-yishu feelcrm-os 1.0.0. This affects an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php of the component getCurlData Endpoint. Executing a manipulation of the argument url can lead to server-side request forgery. It is...

CVE-2026-105291

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

kernel: gfs2: Fix slab-use-after-free in qd_put

A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...

KidnapRAG

KidnapRAG: Um Ataque de Caixa-Preta para Sequestrar o Raciocínio em Sistemas Agênticos de Geração Aumentada por Recuperação 🎓 Paper | 📄 Datasets | 🚀 Início Rápido Início Rápido Execute os seguintes comandos a partir do diretório pai do repositório KidnapRAG clonado. cd KidnapRAG conda create -n...

EVTX-ATTACK-SAMPLES

Amostras de EVTX do Windows 200 exemplos de EVTX: Este é um repositório de amostras de eventos do Windows associadas a técnicas específicas de ataque e pós-exploração. Pode ser útil para: Testar seus scripts de detecção baseados em parsing de EVTX Treinamento em DFIR e caça a ameaças usando logs ...

CVE-2024-55347

Divulgação de CVE: CVE-2024-55347 Divulgação Pública de CVE-2024-55347 🚀 Data: 10-02-2025 Resumo Uma vulnerabilidade de Binary Planting no Kroll Artifact Parser And Extractor KAPE v1.3.0.2 permite que invasores elevem privilégios e executem código arbitrário ao colocar um arquivo binário...

CVE-2026-105291 feelec-yishu feelcrm-os Department Search Endpoint GroupController.class.php index cross site scripting

A vulnerability was identified in feelec-yishu feelcrm-os 1.0.0. This vulnerability affects the function GroupController::index of the file App/Feelcrm/Index/Controller/GroupController.class.php of the component Department Search Endpoint. The manipulation of the argument keyword leads to cross...

CVE-2026-105291

The software feelec-yishu feelcrm-os 1.0.0 contains a cross-site scripting (XSS) vulnerability in the Department Search Endpoint component. The root cause is located in the GroupController::index function within the file App/Feelcrm/Index/Controller/GroupController.class.php, where the manipulati...

CVE-2021-3395

CVE-2021-3395 Descrição sugerida Uma vulnerabilidade de cross-site scripting XSS no Pryaniki 6.44.3 permite que usuários autenticados remotos façam upload de um arquivo arbitrário. O código JavaScript será executado quando alguém visitar o anexo. Tipo de vulnerabilidade Cross Site Scripting XSS...

CVE-2020-24032

CVE-2020-24032 Descrição sugerida O tz.pl nos aplicativos virtuais XoruX LPAR2RRD e STOR2RRD 2.70 permite injeção de comandos cmd=set&tz=OS via metacaracteres de shell em um fuso horário. Tipo de Vulnerabilidade Outro Injeção de comando do sistema operacional Fornecedor do Produto XoruX s.r.o...

CVE-2026-105290

The software feelec-yishu feelcrm-os version 1.0.0 is vulnerable to a server-side request forgery (SSRF) . The flaw exists within the getCurlData endpoint, specifically involving an unknown part of the file App/Feelcrm/Index/Controller/GoogleController.class.php. An attacker can remotely launch t...

CVE-2026-105286

A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub44B250 of the file /boafrm/formUploadFile of the component File Upload Handler. The manipulation of the argument filename results in path traversal. The attack can be executed remotely. The exploit...

CVE-2026-105287

A flaw has been found in feelec-yishu feelcrm-os 1.0.0. Affected is an unknown function of the file App/Feelcrm/Crm/Controller/AjaxRequestController.class.php of the component getMemberByGroups Endpoint. This manipulation of the argument groups causes sql injection. The attack is possible to be...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2026-105289 feelec-yishu feelcrm-os Create Customer Endpoint CrmDefineFormModel.class.php htmlspecialchars_decode cross site scripting

A vulnerability was found in feelec-yishu feelcrm-os 1.0.0. Affected by this issue is the function htmlspecialcharsdecode of the file App/Feelcrm/Common/Model/CrmDefineFormModel.class.php of the component Create Customer Endpoint. Performing a manipulation of the argument customerformremark resul...

CVE-2023-40297

CVE-2023-40297 Stakater Forecastle = v1.0.144 permite travessia de diretório no componente do site Tipo de Vulnerabilidade Travessia de Diretório Fabricante do Produto Stakater Base de Código do Produto Afetado Forecastle = v1.0.144 Componente Afetado Componentes afetados: URL -...