patch-CVE-2026-28001

패치: CVE-2026-28001 취약점 세부 정보 CVE : CVE-2026-28001 제품 : Splunk Enterprise 설명 : SPL 파싱에서의 원격 코드 실행 심각도 : 치명적Critical 패치 상태: 배포됨 필드| 값 ---|--- 패치 날짜| 2026-07-22 상태| deployed 배포 대상| 프로덕션 검증자| SecOps 팀 참고 자료 NVD CISA KEV...

Critical: Red Hat Security Advisory: redhat-ds:11 security, bug fix, and enhancement update

An update for the redhat-ds:11 module is now available for Red Hat Directory Server 11.9 for RHEL 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2021-40539

CVE-2021-40539 CVE-2021-40539: ADSelfService Plus RCE 취약점 1: 취약점 설명 ZOHO ManageEngine ADSelfService Plus는 주하오ZOHO 사의 Active Directory 및 클라우드 애플리케이션을 위한 통합 셀프 서비스 비밀번호 관리 및 싱글 사인온SSO 솔루션입니다. CVE-2021-40539 Zoho ManageEngine ADSelfService Plus 6113 및 이전 버전에는 REST API 인증 우회 취약점이 존재하며, 원격 공격자는 이 취약점을...

CVE-2026-42530

🛡️ CVE-2026-42530 - Уязвимость использования после освобождения в NGINX HTTP/3 QUIC Высококритическая уязвимость использования после освобождения в NGINX HTTP/3 QUIC ⚠️ Уязвимость потока кодировщика QPACK 🔍 Обзор CVE-2026-42530 — это уязвимость использования после освобождения в модуле NGINX...

Linux Distros Unpatched Vulnerability : CVE-2026-79604

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - xen - None Ubuntu Linux - oxenstored: Unbounded accumulation of watches: Oxenstored maintains two datastructures about watches; one global trie,...

Linux Distros Unpatched Vulnerability : CVE-2026-18090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in gdk-pixbuf. This vulnerability allows a remote attacker to cause a heap out-of-bounds read by providing a specially crafted Apple Icon Image...

Security update for lxd (critical)

openSUSE security update: security update for lxd ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21788-1 Rating: critical References: bsc1223794 bsc1274936 bsc1274937 bsc1274954 bsc1274961 bsc1274963 bsc1275084 bsc1275085 bsc1275090 Cross-Reference...

APSB26-142 : Security update available for Adobe Campaign Classic

Adobe has released a security update for Adobe Campaign Classic. This update addresses a critical vulnerability that could result in arbitrary code execution...

Security update for chromium (critical)

openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21799-1 Rating: critical References: bsc1278072 bsc1278683 Cross-References: CVE-2026-84323 CVE-2026-84324 CVE-2026-84325 CVE-2026-84326...

Oracle Linux 10 : ELSA-2026-64796-0: / valkey (ELSA-2026-647960)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-647960 advisory. 8.0.11-1 - Rebase to 8.0.11 for CVE-2026-56684 CVE-2026-63639 CVE-2026-66373 in redis Tenable has extracted the preceding description block directly...

APSB26-132 : Security update available for Adobe Animate

Adobe has released an update for Adobe Animate. This update resolves a critical vulnerability that could result in arbitrary code execution...

APSB26-138 : Security update available for Adobe Commerce

Adobe has released a security update for Adobe Commerce and Magento Open Source. This update resolves critical, important, and moderate vulnerabilities. Successful exploitation could result in security feature bypass and privilege escalation...

PT-2026-88448

A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via...

PT-2026-88627

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-8181

CVE-2026-8181 — Burst Statistics 인증 우회를 통한 관리자 계정 탈취 📋 취약점 정보...

NGINX-Rift

NGINX Rift — CVE-2026-42945 / CVE-2026-9256 脆弱性スキャン・検証ツール NGINX Rift は、CVE-2026-42945 および CVE-2026-9256 （NGINX ngxhttprewritemodule ヒープオーバーフロー脆弱性）のためのオープンソーススキャン・検証ツールです。リモートのネットワークフィンガープリントスキャンとローカルの詳細な構成監査をサポートし、セキュリティチームがNGINX環境の潜在的なリスクを迅速に特定するのに役立ちます。 脆弱性概要 CVE-2026-9256 CVSS 4.0: 9.2 Critica...

CVE-2025-49113-nuclei-template

Nuclei 취약점 탐지 템플릿 - CVE-2025-49113 - Roundcube ≤ 1.6.10 인증 후 원격 코드 실행 CVE ID: CVE-2025-49113 심각도: 치명적 CVSS 10.0 발견자: Kirill Firsov FearsOff 공개일: 2025년 6월 1일 수정 버전: Roundcube 1.6.11 / 1.5.10 LTS root@kitploit: - https://nvd.nist.gov/vuln/detail/CVE-2025-49113 -...

CVE-2024-24919-Exploit

CVE-2024-24919-Exploit Обзор Этот репозиторий содержит эксплойт на Python для уязвимости CVE-2024-24919, которая позволяет читать конфиденциальные файлы с уязвимой страницы. Эксплойт сначала проверяет, уязвима ли цель, а затем получает путь, который вы укажете. Серьёзность : Критическая...

CVE-2026-42945

CVE-2026-42945 - Анализ уязвимости NGINX Rift и воспроизведение Обзор CVE-2026-42945 с кодовым названием "NGINX Rift" — это переполнение кучи heap buffer overflow в модуле ngxhttprewritemodule NGINX. Оценка CVSS v4: 9.2 Critical. Уязвимость была обнаружена исследовательской группой depthfirst в...

cve-2025-63888-exploit

CVE-2025-63888 ThinkPHP 5.0.24 Эксплойт удаленного выполнения кода через включение файлов Инструмент для исследования безопасности, предназначенный для обнаружения и тестирования уязвимости CVE-2025-63888 в ThinkPHP 5.0.24, которая позволяет удаленно выполнять код через включение файлов. ⚠️ Отказ...