CVE-2026-89191 Stored Cross-Site Scripting in SQLView KRIS

Unsanitised input in the "template name" field of SQLView KRIS's Workflow Template feature is rendered in "onclick" attributes on the main dashboard without proper server-side sanitisation, allowing an attacker with administrative access to inject and store malicious scripts that execute in the...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CVE-2026-94578

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution

CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...

CLEANSTART-2026-RE18150 undici's setCookie function does not fully sanitize cookie attributes

CVE-2026-16729 affects multiple packages. undici's setCookie function does not fully sanitize cookie attributes. See references for individual vulnerability details...

PT-2026-107778

Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA Authentication, Authorization, and Accounting integration framework allows remote authenticated users to gain root-equivalent chassis access controls. By returning specific, crafted Vendor-Specific...

CVE-2026-107229

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

EUVD-2026-94590

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

CVE-2026-107229 AsyncHttpClient: Incomplete origin checks in the default cookie store allow cookie tossing onto public-suffix and IP-address hosts

The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. From 2.16.0 until 3.0.14, ThreadSafeCookieStore incompletely validates cookie Domain attributes. Missing private-section and default public-suffix rules, absent...

GHSA-5M6H-8G35-P3M7 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Several @quasar/app-vite SSR and SSG renderer paths interpolate ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides the nonce using untrusted data can allow a quote to terminate the nonce attribute and inject additional attributes or markup into generat...

PT-2026-107760

This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...

Menu Link Attributes - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-209

This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...

CVE-2026-94114 Apache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoning

Symbolic name not mapping to correct class. BCEL caches attacker-controlled classes under their self-declared names without validating the requested name, allowing subsequent lookups and name-keyed verification results to refer to a different class. This issue affects Apache Commons BCEL: before...

CVE-2026-51772

A flaw was found in OpenStack Glance. When the multiple locations configuration option is enabled, an authenticated attacker can perform Server-Side Request Forgery SSRF by submitting a crafted HTTP request to modify an image's location attributes. This vulnerability allows the attacker to induce...

CVE-2026-106107 Quasar Framework: App Vite SSR and SSG nonce attributes are not safely constrained

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to 3.3.0, several @quasar/app-vite SSR and SSG rendering paths interpolated ssrContext.nonce directly into quoted HTML attributes. An application that derives or overrides this value with attacker-controll...

CVE-2021-3493-Exploit

CVE-2021-3493-Exploit CVE-2021-3493 の概念実証ローカル権限昇格エクスプロイト（C言語で記述）。 📌 説明 このリポジトリには、CVE-2021-3493 のエクスプロイトのC言語実装が含まれています。 これは、Linuxカーネルの OverlayFS 実装におけるローカル権限昇格（LPE） の脆弱性です。オーバーレイマウントでファイルが設定される際に、拡張属性（xattrs）の検証が不正確であるため、ローカルユーザーがrootアクセスを取得できるようになります。 🎯 影響を受けるバージョン Ubuntu 20.10 Ubuntu 20.04 LTS...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

CVE-2026-104033

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

[SECURITY] Fedora 45 Update: ocaml-ppx-cold-0.17.0-17.fc45

Ppxcold translates @@cold attributes to: @@inline never @@local never @@specialise never See the discussion in https://github.com/ocaml/ocaml/issues/8563...

CVE-2026-104033

A vulnerability exists in SSSD where the software fails to correctly treat an LDAP shadow expiration value of zero as an expired account. When configured to enforce account expiration via LDAP, this access control bypass allows a user with valid credentials for a deactivated account to authentica...