1309 matches found
mojarra-2.2.13-patched
Mojarra 2.2.13 – CVE-2020-6950 向后移植 本仓库包含针对 CVE-2020-6950 修复到 Mojarra 2.2.13 的可复现向后移植。 其存在主要用于可追溯性以及维护那些出于兼容性原因无法直接升级到更新 JSF/Mojarra 版本的遗留应用程序。 致谢与上游来源 Mojarra Mojarra 是 JavaServer Faces JSF 的参考实现，最初作为 GlassFish/Java EE 生态系统的一部分开发，现由 Eclipse Mojarra 项目维护。 本仓库中包含的 Mojarra 源代码并非我的作品 。所有版权归原始 Mojarr...
Joomla-3.10.12-languagehelper-hotfix
ESTE REPO ESTÁ OBSOLETO Y DEBERÍAS USAR ESTE EN SU LUGAR: https://github.com/TLWebdesign/Joomla-3-EOL-Security-Fixes Joomla-3.10.12 LanguageHelper.php Parche Temporal Este pequeño plugin te ayudará a actualizar el archivo LanguageHelper con la corrección de seguridad que backporté desde Joomla...
Oracle Linux 9 : ELSA-2026-62406-0: / grafana (ELSA-2026-624060)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-624060 advisory. 10.2.6-23.3 - Rebuild against updated golang - Resolves RHEL-251872 - Resolves RHEL-251758 - Resolves RHEL-242365 - Resolves RHEL-242251 - Resolves...
Oracle Linux 8 : ELSA-2026-62571-0: / freerdp (ELSA-2026-625710)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-625710 advisory. 2:2.11.7-12 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225093, RHEL-227724,...
Oracle Linux 9 : ELSA-2026-61379-0: / freerdp (ELSA-2026-613790)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-613790 advisory. 2:2.11.7-7.6 - Backport several CVE fixes CVE-2026-55194, CVE-2026-67288, CVE-2026-67291, CVE-2026-67301 Resolves: RHEL-225096, RHEL-227729,...
CveTest
CveTest Caso de prueba para replicar el fallo de Node.JS V0.10.31 v8 backport CVE-2013-6668 . La prueba llama a un procedimiento almacenado SQL "GetSomething" para recuperar datos de una tabla "Table1" en la base de datos "SQLDB". El fallo ocurre cuando se devuelven más de 52 filas y después de...
jq-els-backport-cve-2025-48060
jq-els-backport-cve-2025-48060 已将 CVE-2025-48060（jvstringempty 中的堆缓冲区溢出）的上游修复反向移植到 jq 1.6。 反向移植（CVE-2025-48060）—— 将上游提交 c6e0416（“修复格式化空字符串时的堆缓冲区溢出”）从较新的 jq 版本反向移植到 jq-1.6，调整了内部字符串表示（jvstringempty），添加了回归测试（0implode），并成功重新构建和运行了测试套件。 如何应用此补丁 你可以在官方 jq-1.6 版本之上应用此反向移植，既可以基于 tarball，也可以基于 git checkou...
openvz-cve-patch-2026
GhostLock - Parche backport de CVE-2026-43499 para openVZ 7 Parche backport de CVE-2026-43499 para el kernel de openVZ 7 vzkernel-3.10.0-1160.129.1.ovz7.226.2 Dado que el equipo de OpenVZ no ha implementado un parche para el kernel de OpenVZ todavía, con la ayuda de Claude he creado este y parece...
JavaScript-Example
Seal Security — JavaScript npm Example A minimal, intentionally vulnerable Node.js/Express application used to demonstrate, end‑to‑end, how Seal Security remediates a known CVE by replacing a vulnerable dependency with a sealed backported, drop‑in version — with no change to your declared version...
mistune-patch-backport
Patch CVE-2021-1748 per iOS = 14.3 La causa principale di CVE-2021-1748 è che l'app si fida di URI di dati arbitrari e li carica in una WebView locale. Questo tweak porta indietro la patch per iOS = 14.3 intercettando l'URI data:. Si noti che esiste ancora una potente variante del bug. Questa pat...
Oracle Linux 7 : libreoffice (ELSA-2026-46386)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-46386 advisory. - Backport fix for CVE-2026-4430 Orabug: 39791243 - Backport fix for CVE-2026-8357 Orabug: 39791243 Tenable has extracted the preceding description...
Astra Linux – Vulnerability in Xen
A issue was discovered in Xen through version 4.11.x, allowing users of x86 Intel HVM guest operating systems to obtain unintended read/write DMA access. This could potentially lead to a denial of service causing the host operating system to crash or result in privilege escalation. This issue...
Astra Linux – Vulnerability in Python 3.7, Python 2.7
In Python aka CPython, up to version 3.10.8, the mailcap module does not add escape characters to commands found in the system’s mailcap file. This may allow attackers to inject shell commands into applications that call mailcap.findmatch with untrusted input if those commands lack validation of...
Astra Linux – Vulnerability in Heimdal
The fix for CVE-2022-3437 involved changing the memcmp function to run in constant time, as well as providing a workaround for a compiler bug by adding comparisons of the result with the value “!= 0” to the memcmp function. When these patches were backported to the heimdal-7.7.1 and heimdal-7.8.0...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: TCP: TX zerocopy should not access the pfmemalloc status. We received a recent syzbot report 1 indicating a possible misuse of the page status in TCP zerocopy paths. Indeed, for pages originating from user space or other layers,...
Astra Linux – Vulnerability in Redis
Redis is an open-source, in-memory database that persists data on disk. In affected versions of Redis, a integer overflow bug in the 32-bit Redis version 4.0 or newer can be exploited to corrupt the heap and potentially lead to remote code execution. Redis 4.0 or newer uses a configurable limit f...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: usb: musb: dsps: Fix the probe error path The commit 7c75bde329d7 “usb: musb: musbdsps: requestirq after initializing musb” has corrected the calls to dspssetupoptionalvbusirq and dspscreatemusbpdev, but it did not update the err...
libssh security update
0.12.0-3 - Backport CVE fixes from 0.12.2 Resolves: RHEL-213004 Resolves: RHEL-213029 Resolves: RHEL-213032 Resolves: RHEL-213039 Resolves: RHEL-213046 Resolves: RHEL-213079 Resolves: RHEL-213112 Resolves: RHEL-213117 Resolves: RHEL-213148 Resolves: RHEL-213150 Resolves: RHEL-213175...
