58 matches found
magento2-encryption-key-manager-cli
مدير مفاتيح التشفير لـ Magento 2 CLI أداة لتدوير وإدارة مفاتيح التشفير في Magento 2. يمكن لضحايا CVE-2024-34102 المعروفة باسم Cosmic Sting استخدامها كرعاية لاحقة. صُمم لـ استخدام التطوير أتمتة النشر الرعاية اللاحقة لـ CVE-2024-34102 المعروفة باسم Cosmic Sting CVE-2024-34102 المعروفة باسم Cosmic...
cosmicsting-validator
Un Cosmicsting POC, avec un script bash pour vérifier que le correctif est appliqué sur tous nos sites hébergés. Ce dépôt est fourni pour permettre aux propriétaires de boutiques / hébergeurs de confirmer que le correctif est appliqué sur les boutiques. Dans check.bash, ajoutez des domaines à la...
CVE-2026-25704
A flaw was found in cosmic-greeter. This vulnerability is a Time-of-check Time-of-use TOCTOU race condition, which occurs when an application checks for a condition and then uses the result of that check, but the condition changes between the check and the use. A local attacker can exploit this...
EUVD-2026-17067
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
CVE-2026-25704
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
CVE-2026-25704
The CVE-2026-25704 entry concerns cosmic-greeter and describes a TOCTOU race condition that can allow a local attacker to regain privileges that should have been dropped due to incomplete privilege dropping in the GetUserData flow. Multiple connected feeds corroborate that the issue affects cosmi...
CVE-2026-25704 Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
CVE-2026-25704
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
CVE-2026-25704 Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
cosmic-greeter 安全漏洞
Cosmic-Greeter is a login manager open source from Pop!OS. Cosmic-Greeter has a security vulnerability, which stems from privilege disposal or reduction errors, as well as race conditions. This could allow attackers to reacquire discarded privileges and exploit the competing check logic...
CVE-2026-25704: Privilege Dropping / Lowering Errors
A Privilege Dropping / Lowering Errors/Time-of-check Time-of-use TOCTOU Race Condition vulnerability in cosmic-greeter can allow an attacker to regain privileges that should have been dropped and abuse them in the racy checking logic. This issue affects cosmic-greeter before...
PT-2026-28805
Name of the Vulnerable Software and Affected Versions cosmic-greeter versions prior to https://github.Com/pop-os/cosmic-greeter/pull/426 Description A Time-of-check Time-of-use TOCTOU race condition exists in cosmic-greeter. This condition can allow an attacker to regain privileges that should ha...
EUVD-2025-179147
Malicious code in enceladus-oortcloud-augmentedreality-cosmicsilence npm...
EUVD-2025-180291
Malicious code in astrochemistry-rigel-csrf-cosmicweb npm...
EUVD-2025-176414
Malicious code in server-child-process-cosmicray-extremophile npm...
Malicious code in cosmic-fonts (npm)
The package cosmic-fonts was found to contain malicious code...
Malicious code in cosmic-dev-server (npm)
The package cosmic-dev-server was found to contain malicious code...
Malicious code in cosmic-translations (npm)
The package cosmic-translations was found to contain malicious code...
