59239 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the use of a global inlinexattrslab instead of a per-superblock slab cache, which could lead to duplicate...
PT-2026-2861
The vulnerability exists in BLUVOYIX due to improper authentication in the BLUVOYIX admin APIs. An unauthenticated remote attacker could exploit this vulnerability by sending specially crafted HTTP requests to the vulnerable admin API to create a new user with admin privileges. Successful...
Huawei EulerOS: Security Advisory for glib2 (EulerOS-SA-2026-1048)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-50898
NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page creation mechanism without proper...
CVE-2022-50898
NanoCMS 0.4 contains an authenticated file upload vulnerability that allows remote code execution through unvalidated page content creation. Authenticated attackers can upload PHP files with arbitrary code to the server's pages directory by exploiting the page creation mechanism without proper...
CVE-2026-22196
GestSup versions prior to 3.2.60 contain a SQL injection vulnerability in ticket creation functionality. User-controlled input provided during ticket creation is incorporated into SQL queries without sufficient neutralization, allowing an authenticated attacker to manipulate database queries...
CVE-2026-22194
GestSup versions up to and including 3.2.60 contain a cross-site request forgery CSRF vulnerability where the application does not verify the authenticity of client requests. An attacker can induce a logged-in user to submit crafted requests that perform actions with the victim's privileges. This...
CVE-2026-22871
creationtimestamp| type| source ---|---|--- 2026-01-13 22:26:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdly4rcs22e 2026-01-24 21:25:29+00:00| seen| https://gist.github.com/alon710/6ed28dba41b78b35d740216de4fe6276 2026-01-24 22:40:55+00:00| seen|...
CVE-2026-21301
creationtimestamp| type| source ---|---|--- 2026-01-13 22:22:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdlqh74ei2o...
Outray cli is vulnerable to race conditions in tunnels creation
Summary A TOCTOU race condition vulnerability allows a user to exceed the set number of active tunnels in their subscription plan. Details Affected conponent: apps/web/src/routes/api/tunnel/register.ts - /tunnel/register endpoint code-: ts // Check if tunnel already exists in database const...
CVE-2026-21299
creationtimestamp| type| source ---|---|--- 2026-01-13 21:37:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdjaty5y72g 2026-01-13 21:59:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdkh37dat2g...
CVE-2025-37186
creationtimestamp| type| source ---|---|--- 2026-01-13 21:32:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdiwkhhzb2y 2026-01-13 22:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdkjffafh2m...
GHSA-FFJ4-JQ7M-9G6V
creationtimestamp| type| source ---|---|--- 2026-01-13 21:09:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115889836069615909 2026-01-24 21:25:24+00:00| seen| https://gist.github.com/alon710/1704fe210c52be7ed4098a296bff9e33 2026-01-24 22:40:51+00:00| seen|...
CVE-2026-21307
creationtimestamp| type| source ---|---|--- 2026-01-13 21:00:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdh5zpo7g2g...
CVE-2026-22869
Eigent’s CVE-2026-22869 affects its CI workflow (.github/workflows/ci.yml) used in the Eigent multi‑agent Workforce. The vulnerability arises from using the pull_request_target trigger in combination with checking out untrusted PR code, enabling arbitrary code execution from fork pull requests wi...
GHSA-5J7Q-WMH7-CQHG TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Problem By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a...
TYPO3 CMS Allows Broken Access Control in Edit Document Controller
Problem By exploiting the defVals parameter, attackers could bypass field‑level access checks during record creation in the TYPO3 backend. This gave them the ability to insert arbitrary data into prohibited exclude fields of a database table for which the user already has write permission for a...
CVE-2026-22818
creationtimestamp| type| source ---|---|--- 2026-01-13 20:21:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcdez3vvsc2p 2026-01-13 21:44:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdjnjy7222y 2026-01-24 21:25:19+00:00| seen|...