New-lib3mf.dll-for-MeshMixer

适用于 MeshMixer 的新版 lib3mf.dll 为 MeshMixer 预编译的 lib3mf.dll，包含针对 CVE-2021-21772 的回移植补丁以及更新的 zlib 1.3.1。 替换原始文件到 C:\Program Files\Autodesk\Meshmixer\ 包含源代码，如果您希望自行编译。 CVE-2021-21772：https://talosintelligence.com/vulnerabilityreports/TALOS-2020-1226...

salt-security-backports

旧版本的官方补丁可通过以下地址申请：https://www.saltstack.com/lp/request-patch-april-2020/ ⚠ 此处补丁为定制补丁，可能与官方补丁有所不同 ⚠ 为不受支持的 Salt 版本提供的向后移植安全补丁 本仓库中的补丁针对以下 CVE： CVE-2020-11651 & CVE-2020-11652 - https://labs.f-secure.com/advisories/saltstack-authorization-bypass 此外还包含以下缺陷修复： 修复拼写错误 minionrunner -...

CVE-2025-12543-Fix-for-Wildfly

WildFly 11.0.0.Final 基础镜像 — CVE-2025-12543 补丁 概述 本仓库提供了一个基于 WildFly 11.0.0.Final 构建的 Docker 基础镜像，其中包含针对 CVE-2025-12543 的向后移植修复。该漏洞是 Undertow 中一个严重的 Host 头验证漏洞。 该镜像旨在作为基础镜像提供给同事。他们可以在此基础上部署自己的 .war 应用和 standalone.xml。 CVE-2025-12543 摘要 字段| 详情 ---|--- CVE ID| CVE-2025-12543 组件|...

CVE-2026-46242

CVE-2026-46242 完整的PoC和本地提权 Kernel Range Status Notes 5.15.209 - 5.16 受影响 回移植引入提交 6.1.175 - 6.2 受影响 回移植引入提交 6.4 - 6.18.32 受影响 漏洞在主线6.4中引入 6.19 - 7.0.9 受影响 包含最新稳定版 v6.1-based Pixel 8, older 不受影响 早于引入提交...

CVE-2026-64638

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially crafted malicious third-party website hosted by an attacker, it is possible for this to be escalated to an RCE vulnerability with conditions outside of the attackers control. This requires...

CVE-2026-64638

WordPress Core suffers a pre-auth reflected XSS on wp-login.php that can escalate to RCE via an attacker-controlled page, in a chain dubbed XSS2Shell. The attack requires social engineering and explicit user interaction, and can affect all versions before the emergency 7.0.3 patch (backported to ...

GHSA-C4C3-PG64-4M4V Mermaid configuration APIs allow prototype pollution

Summary Mermaid's configuration setters mermaid.initialize, mermaidAPI.setConfig, and mermaidAPI.updateSiteConfig merge the caller-supplied configuration object into Mermaid's internal config using the assignWithDepth deep-merge helper that is vulnerable to prototype pollution. Because these APIs...

Exploit for CVE-2026-64560

CVE-2026-64560 — Linux Kernel posix-cpu-timers Non-leader exec...

Oracle Linux 8 : nodejs:24 (ELSA-2026-47060)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-47060 advisory. - Backport patches for various CVEs Fixes: CVE-2026-59873 CVE-2026-59874 CVE-2026-13149 Resolves: RHEL-194176 RHEL-194179 RHEL-208658 Tenable has...

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local user overwrite root-owned files on an XFS filesystem and gain persistent root access. Qualys said default installations of Red Hat Enterprise Linux and its derivatives, Fedora Server, and...

libpq security update

13.23-3 - Add BuildRequires for perl-File-Compare needed by genbki.pl - Related: RHEL-192239 13.23-2 - Backport fixes for CVE-2026-6478, CVE-2026-6637, CVE-2026-6477, CVE-2026-6475, CVE-2026-6473 from PostgreSQL 14.23 - Resolves: RHEL-192239...

Fedora 43 : python-pillow (2026-fc2ded926e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-fc2ded926e advisory. Backport fixes for CVE-2026-59197 and CVE-2026-54058. ---- Fix CVE-2026-55380, CVE-2026-54060, CVE-2026-54059, CVE-2026-55379, CVE-2026-55798 Tenabl...

Fedora 44 : erlang (2026-dcf80dc1ff)

"The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dcf80dc1ff advisory. Backport fixes for CVE-2026-48858 ftp SSRF, CVE-2026-49759 SCTP DoS, CVE-2026-48860 dist-over-TLS auth bypass, CVE-2026-54886 ssh SFTP DoS,...

PYSEC-2026-3091 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...

Overflow in `ImageProjectiveTransformV2`

ImpactWhen tf.rawops.ImageProjectiveTransformV2 is given a large output shape, it overflows.pythonimport tensorflow as tfinterpolation = "BILINEAR"fillmode = "REFLECT"images = tf.constant0.184634328, shape=2,5,8,3, dtype=tf.float32transforms = tf.constant0.378575385, shape=2,8,...

PYSEC-2026-3126 Overflow in `FusedResizeAndPadConv2D`

Impact When tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows. python import tensorflow as tf mode = "REFLECT" strides = 1, 1, 1, 1 padding = "SAME" resizealigncorners = False input = tf.constant147, shape=3,3,1,1, dtype=tf.float16 size =...

PYSEC-2026-3235 Missing validation results in undefined behavior in `SparseTensorDenseAdd

Impact The implementation of tf.rawops.SparseTensorDenseAdd does not fully validate the input arguments: python import tensorflow as tf aindices = tf.constant0, shape=17, 2, dtype=tf.int64 avalues = tf.constant, shape=0, dtype=tf.float32 ashape = tf.constant6, 12, shape=2, dtype=tf.int64 b =...

PYSEC-2026-3138 Memory leak in Tensorflow

Impact If a graph node is invalid, TensorFlow can leak memory in the implementation of ImmutableExecutorState::Initialize: cc Status s = params.createkerneln-properties, &item-kernel; if !s.ok item-kernel = nullptr; s = AttachDefs, n; return s; Here, we set item-kernel to nullptr but it is a simp...

libtasn1 security update

4.13-6 - Backport the fix for CVE-2025-13151 RHEL-139546...

PYSEC-2026-945 Overflow in `ResizeNearestNeighborGrad`

Impact When tf.rawops.ResizeNearestNeighborGrad is given a large size input, it overflows. import tensorflow as tf aligncorners = True halfpixelcenters = False grads = tf.constant1, shape=1,8,16,3, dtype=tf.float16 size = tf.constant1879048192,1879048192, shape=2, dtype=tf.int32...