RLSA-2026:75571 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

sudo security update

An update is available for sudo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

RLSA-2026:75580 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: sudo: TZ environment variable allows...

sudo security update

An update is available for sudo. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

EUVD-2026-92968

The File Media Renamer WordPress plugin through 1.3 does not verify that the requesting user is authorised to modify a given media attachment, allowing any user with file-upload privileges to rename attachments belonging to other users, including administrators, and to corrupt unrelated stored si...

CVE-2026-46558

CVE-2026-46558 Plane의 V2 에셋 하위 시스템은 올바른 멤버십 확인을 시행하지 않고 신뢰된 작업공간 슬러그slug와 에셋 UUID를 사용하여, 인증된 사용자가 다른 작업공간의 에셋을 읽고, 복사하고, 삭제하고, 덮어쓸 수 있도록 했습니다. 소개 이 문제는 Plane오픈소스 프로젝트 관리 플랫폼을 검토하면서 특정 질문을 염두에 두고 발견했습니다: V2 에셋 엔드포인트가 실제로 작업공간 경계를 강제하는가, 아니면 공격자가 제공한 작업공간 슬러그와 에셋 ID를 너무 신뢰하는가? 이 경우, 답은 '아니오'였습니다...

CVE-2026-105572

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

Thank-u-Next

Thank u Next – CVE-2025-29927 Exploit Tool 🧠 CVE-2025-29927이란 무엇인가? 단순한 우회가 아니라, 하나의 계시입니다. 미들웨어 로직에 의해 오해되고 잘못 처리된 단일 헤더가, 원래 잠겨 있어야 할 것의 마스터 키가 됩니다. CVE-2025-29927은 잘못 구성된 미들웨어 인가 계층 을 악용합니다. 특히, 출처나 컨텍스트를 검증하지 않고 헤더 x-middleware-subrequest를 신뢰하는 시스템을 말합니다. 쉽게 말하면? 헤더 하나만 추가하면, 짠 — 당신은 들어가 있습니다...

CVE-2026-105572 PickMall Lilishop Buyer Invoice List receipt authorization

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

EUVD-2026-92930

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

CVE-2026-105572 PickMall Lilishop Buyer Invoice List receipt authorization

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

CVE-2026-105572

A vulnerability exists in PickMall Lilishop version 4.2.4 and below, specifically within the Buyer Invoice List component. An unknown function in the /buyer/trade/receipt file is susceptible to authorization bypass when the memberId argument is manipulated. This flaw is exploitable remotely . Pub...

CVE-2026-105572 PickMall Lilishop Buyer Invoice List receipt authorization

A vulnerability has been found in PickMall Lilishop up to 4.2.4. This affects an unknown function of the file /buyer/trade/receipt of the component Buyer Invoice List. Such manipulation of the argument memberId leads to authorization bypass. It is possible to launch the attack remotely. The explo...

nextjs-middleware-exploit

Next.js 미들웨어 취약점 연구 CVE-2025-29927 이 저장소는 Next.js 미들웨어의 심각한 취약점CVE-2025-29927 을 시연합니다. 이 취약점은 버전 11.1.4에서 15.1.7까지 영향을 미칩니다. 이 취약점은 인증 우회 , CSP 우회 , 그리고 캐시 중독을 통한 잠재적 DoS 공격 을 허용합니다. 문제는 x-middleware-subrequest 헤더가 처리되는 방식에서 발생하며, 공격자가 미들웨어 보호 메커니즘을 우회할 수 있게 합니다. 이 개념 증명은 v12 의 취약점에 특화되어 있습니다. 사용...

CLEANSTART-2026-YR68258 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

CVE-2026-46595 affects multiple packages. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped. See references for individual vulnerability...

PT-2026-107237

Name of the Vulnerable Software and Affected Versions QnABot on AWS versions 7.0.0 through 7.4.5 Description An authorization bypass exists in the optional Amazon Q Business Lambda hook sample. This issue occurs due to a user-controlled key, which may allow an authenticated remote user to read...

CVE-2026-106363: Missing Authorization

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106289: Missing Authorization

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107290

The Gitea API endpoint for creating push mirrors POST /api/v1/repos/owner/repo/push mirrors checked only whether mirroring was enabled and not the mirror DISABLE NEW PUSH setting that the web interface enforces. A repository administrator could therefore create new push mirrors on instances where...

PT-2026-106340

Name of the Vulnerable Software and Affected Versions File Media Renamer versions prior to 1.4 Description The File Media Renamer WordPress plugin fails to verify if the requesting user is authorized to modify a specific media attachment. This allows any user with file-upload privileges to rename...