cve-2019-6260

Un outil de test et de débogage pour les interfaces AHB des BMC ASPEED Avertissement N'UTILISEZ PAS CET OUTIL SI VOUS N'AVEZ PAS COMPRIS SES COMPORTEMENTS DANS LE CONTEXTE DE VOTRE MACHINE CIBLE. Cet outil manipule des interfaces matérielles et micrologicielles bas niveau de votre machine. En...

CVE-2020-13937

Description Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha expose une API RESTful qui divulgue les informations de configurati...

CVE-2019-10149

CVE-2019-10149 - Exim 4.87 Local/Makefile cp eximmonitor/EDITME Local/eximon.conf Создайте пользователя и группу exim sudo groupadd -g 31 exim sudo useradd -d /dev/null -c "Exim Daemon" -g exim -s /bin/false -u 31 exim Установите зависимости sudo apt-get update sudo apt-get install -y make...

CVE-2020-6286

CVE-2020-6286 SAP NetWeaver AS JAVA LM Configuration Wizard - Traversée de répertoire SAP NetWeaver est la plateforme technologique intégrée de SAP et le fondement technique de toutes les applications SAP depuis SAP Business Suite. SAP NetWeaver est une plateforme applicative et d'intégration...

CVE-2023-27524

CVE-2023-27524 Contournement de l'authentification Apache Superset CVE-2023-27524 Références https://nvd.nist.gov/vuln/detail/CVE-2023-27524 https://github.com/horizon3ai/CVE-2023-27524...

CyberStrikeAI

CyberStrikeAI 中文 | English Система действий для кибербезопасности с приоритетом ИИ — где намерение превращается в управляемое исполнение, доказательства становятся операционной памятью, а каждая операция улучшает следующую. CyberStrikeAI объединяет планирование, исполнение, человеческий надзор,...

CLSA-2026-1791205000 TuxCare security update for commons-configuration:commons-configuration (1 CVE)

TuxCare rebuilt commons-configuration:commons-configuration to address 1 CVE. Fixed in 1.10-tuxcare.3...

kernel: vxlan: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's VXLAN Virtual Extensible LAN implementation. A local attacker, with CAPNETADMIN network administration capability in one network namespace, could exploit an incorrect privilege check in the rtnl changelink path. This allows the attacker to modify the...

kernel: net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink

A flaw was found in the Linux kernel's ip6gre and ip6erspan tunnel drivers. The changelink functions in these drivers do not adequately verify administrative capabilities CAPNETADMIN across different network namespaces. This allows a local attacker, who has CAPNETADMIN in one network namespace bu...

CVE-2022-24734

CVE-2022-24734 PoC Une RCE peut être obtenue dans le panneau d'administration de MyBB sous Configuration - Ajouter un nouveau paramètre. L'utilisateur doit avoir les droits d'ajouter ou de mettre à jour un paramètre. Ceci a été testé sur MyBB 1.8.29. Sources: https://github.com/mybb/mybb/...

cve-2026-42945-scan

cve-2026-42945-scan Статический сканер для конфигурационных файлов NGINX, который обнаруживает шаблон rewrite/set, связанный с CVE-2026-42945. Сканер обрабатывает конфиги NGINX с помощью crossplane, обходит блоки location и выводит каждый потенциально уязвимый location в следующем формате:...

Astra Linux – Vulnerability in configobj

All versions of the package configobj are vulnerable to Regular Expression Denial of Service ReDoS via the validate function, using .+?.. Note: This vulnerability can only be exploited by developers who place the offending values in server-side configuration files...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ffs: Remove WARNON from functionfsbind This commit addresses an issue related to a kernel panic that occurs when paniconwarn is enabled. The issue is caused by the unnecessary use of WARNON in functionfsbind, which c...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: uio: uiodmemgenirq: Fixed an issue where the unlock operation was missed in irq configuration. The commit b74351287d4b “uio: fixed a bug in uiodmemgenirqirqcontrol”. corrected the code so that disableirq was called without...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: loop: Overflow check during loop configuration The user space can configure a loop using an ioctl call. In this process, a configuration of type loopconfig is passed see the loioctl case on line 1550 of drivers/block/loop.c. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: wext: Added an additional check for the number of channels returned by ioctlsock, SIOCSIWSCAN,..., to ensure that this number does not exceed IWMAXFREQUENCIES. Invalid requests will be rejected with the error...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skips inactive planes within ModeSupportAndSystemConfiguration. Reason Coverity reported a memory issue involving illegal access attempts. How The inactive planes are skipped...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net: hns3 – added validation of the VLAN ID before using it. Currently, the VLAN ID can be used without validation when receiving a VLAN configuration mailbox from VF. The length of vlansdelfailbmap is BITSTOLONGSVLANNVID. This m...

Astra Linux – Vulnerability in aspell

The libaspell.a file in GNU Aspell before version 0.60.8 has a buffer overflow issue for strings that end with a single '\0' byte. This issue occurs when the encoding is set to ucs-2 or ucs-4 outside of the application, as indicated by the ASPELLCONF environment variable...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Created a persistent INTx handler. There exists a vulnerability where the eventfd for INTx signaling can be deconfigured. This causes the IRQ handler to be unregistered, but it still allows eventfds to be signaled with ...