PT-2026-83012

In the Linux kernel, the following vulnerability has been resolved: spi: spi-qpic-snand: write the feature value before executing SET FEATURE qcom spi send cmdaddr programs NAND FLASH CMD/NAND EXEC CMD and submits the descriptors, which makes the controller execute the command immediately. For...

PT-2026-83000

In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: validate external BO copy bounds for both stride paths vmw external bo copy trusts caller-supplied offsets, strides, and heights and operates on imported dma-buf vmaps: - The equal-stride memcpy bound was clamped afte...

PT-2026-82962

In the Linux kernel, the following vulnerability has been resolved: cxl: Fix CXL HEADERLOG SIZE to match RAS Capability size The CXL r4.0 8.2.4.17.7 RAS Capability Structure has total length 0x58 bytes CXL RAS CAPABILITY LENGTH; the Header Log occupies the trailing 64 bytes at offset 0x18. CXL...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

CVE-2026-38093

filepicker aka flutterfilepicker for Flutter, all versions through 10.3.10, is vulnerable to path traversal CWE-22 in its Android implementation. The openFileStream method in FileUtils.kt uses the DISPLAYNAME obtained from ContentResolver.query directly in file path construction without...

PT-2026-83253

aqua is a declarative command-line version manager written in Go. Prior to 2.60.1, pkg/unarchive/archives.go in the handler.HandleFile method calls os.Symlink with archives.FileInfo.LinkTarget without verifying that the target remains under the extraction destination. A later regular-file entry a...

EUVD-2026-67776

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

CVE-2026-37236

grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method i...

reproducer-poc-CVE-2022-0847

CVE-2022-0847 dirty pipe का एक सरल डिटेक्टर और पुनरुत्पादक। यह सीमित बिल्डिंग ब्लॉक्स / इनपुट मानों केवल जनरेशन, कोई उन्नत फ़ज़िंग नहीं; कोई म्यूटेशन नहीं; कोई कवरेज गाइडेंस नहीं; कोई श्रिंकिंग/मिनीमाइज़ेशन नहीं से सिस्कॉल अनुक्रमों/प्रोग्रामों का एक सरल जनरेटर उपयोग करता है और प्रत्येक क्रिया के...

CVE-2025-46203

Description Unifiedtransform v2.0 è vulnerabile a un controllo degli accessi errato. Qualsiasi utente studenti e insegnanti può accedere e modificare le registrazioni degli studenti tramite gli endpoint /students/edit/id. Questa funzionalità è destinata esclusivamente all'uso amministrativo. Lo...

CVE-2026-31431

Panoramica della vulnerabilità CVE-2026-31431 ID CVE: CVE-2026-31431 Soprannome: Copy Fail Livello di gravità: Alto punteggio CVSS v3 7.8 Tipo di vulnerabilità: Escalation dei privilegi locale LPE Componente interessato: modulo algifaead del kernel Linux interfaccia crittografica AFALG Prerequisi...

CVE-2021-21985_PoC

Dettagli della vulnerabilità VMWARE VCENTER SERVER VIRTUAL SAN HEALTH CHECK PLUG-IN RCE CVE-2021-21985 Il client vSphere HTML5 contiene una vulnerabilità di esecuzione remota di codice in un plugin di vCenter Server. Un attore malintenzionato con accesso di rete alla porta 443 può sfruttare quest...

CVE-2025-60876

CVE-2025-60876: correzione dell'iniezione nel request-target di busybox wget Una correzione che preserva il comportamento per CVE-2025-60876, una vulnerabilità di iniezione di intestazioni HTTP in BusyBox wget, più la proof-of-concept che la dimostra e gli artefatti per inviare la correzione...

apache__jspwiki_CVE-2022-46907_2-11-3

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-10089_2-11-0-M4

Apache JSPWiki 2.11 - Dokumentation root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-10077_2_11_0_M4_fixed

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

apache__jspwiki_CVE-2019-0225_2-11-0-M2

Apache JSPWiki 2.11 - Documentazione root@kitploit: Licensed to the Apache Software Foundation ASF under one or more contributor license agreements. See the NOTICE file distributed with this work for additional information regarding copyright ownership. The ASF licenses this file to you under the...

CVE-2026-77358

cpp-httplib , a C++ header-only HTTP/HTTPS library, is affected by a use-after-free vulnerability in its TLS-enabled WebSocket client (versions 0.33.0 through 0.50.0 ). In WebSocketClient::shutdown_and_close(), the SSL object is freed and its pointer cleared before the WebSocket close frame is se...

CVE-2026-77358 cpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...

CVE-2026-77358

cpp-httplib is a C++ header-only HTTP/HTTPS library. In versions 0.33.0 through 0.50.0, the TLS-enabled WebSocket client frees the TLS session before closing the WebSocket that still uses it, producing a use-after-free. In WebSocketClient::shutdownandclose the SSL object is freed and the pointer...