CVE-2026-97945

A flaw was found in the Linux kernel. A local user can cause silent data loss or data corruption due to improper memory tracking in the x86 memory management subsystem. When modifying permissions on transparent huge pages a mechanism that optimizes memory by grouping it into larger blocks, the...

CVE-2017-13286

CVE-2017-13286 CVE-2017-13286 Poc使用不可 すべてのリソースはこの記事から引用されています https://bbs.kanxue.com/thread-268506.htm この脆弱性の主な原因は、Parcelオブジェクトの読み書きの不一致にあります。具体的には、以下のコードにまで遡ることができます。 public void writeToParcelParcel dest, int flags if dest == null throw new IllegalArgumentException"dest must not be null";...

CVE-2018-10546

CVE-2018-10546 ユーザーは、'convert.iconv.' を使用するストリームフィルターで処理すると、対象アプリケーションが無限ループに入り、過剰な CPU リソースを消費する原因となる、特別に細工されたデータを作成できます CVE-2018-10546。 これらの脆弱性の具体的な影響は、影響を受ける関数やサービスを使用するアプリケーションによって異なります。...

CVE-2026-81841

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...

CVE-2022-36804-MASS-RCE

CVE-2022-36804-POC Atlassian Bitbucket Server 和 Data Center 中存在一个严重漏洞（CVE-2022-36804），未经授权的攻击者可利用该漏洞在易受攻击的实例上执行恶意代码。 受影响版本 Bitbucket Server 和 Data Center 在 7.6.17、7.17.10、7.21.4、8.0.3、8.1.2、8.2.2 和 8.3.1 之前发布的所有版本均存在漏洞 POC: 该 PoC 使用 Python 编写，具备多种功能（多线程、IP 列表、轻量级、交互式 Shell……） 此上传附带服务器列表（其中大部分存在漏洞...

CVE-2026-102620

A flaw was found in Poppler. An integer overflow vulnerability in the TrueType font handling code can allow a local user to cause data corruption. By providing a specially crafted font file processed by the FoFiTrueType::cvtSfnts function, an attacker can cause improper data modification and...

CVE-2026-81841 Paused shared dashboard access tokens still expose data source configuration

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...

CVE-2026-81841

A vulnerability exists in Grafana where pausing a shared (public) dashboard fails to revoke its access token for endpoints serving frontend bootstrap data. This missing authorization allows anyone with the link to a paused dashboard to retrieve the configuration of its data sources without authen...

CVE-2026-81841 Paused shared dashboard access tokens still expose data source configuration

Pausing a shared public dashboard did not revoke its access token for the endpoints that serve frontend bootstrap data. Anyone holding the link to a paused shared dashboard could still retrieve, without authenticating, the configuration of the dashboard's data sources, including stored credential...

Security Bulletin: InfoSphere Data Replication - Data Replication for Availability is affected by arbitrary code execution, cross-site scripting, and denial of service

Summary IBM has released the below fix for IBM InfoSphere Data Replication - Data Replication for Availability Db2U Qreplication container in response to multiple vulnerabilities. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2026-33916...

CVE-2026-79537

metatool-ai MetaMCP through 2.4.22 contains an insecure direct object reference IDOR in the MCP transport session dispatch. The session store getSession in session-lifetime-manager.ts is keyed only by the client-supplied mcp-session-id header with no owner, namespace, or endpoint binding, and the...

CVE-2026-76731

An authentication bypass vulnerability in the captive portal of HPE Networking Instant On could allow an unauthenticated remote attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to gain limited access to some data and to make limited changes...

DEBIAN-CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102325

Uninitialized resource in Skia in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102300

Uninitialized resource in WebGPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CTF_Django_CVE-2022-34265

CTFCVE-2022-34265 説明 Django 3.2（3.2.14より前）および 4.0（4.0.6より前）に問題が発見されました。Trunc および Extract データベース関数は、信頼できないデータが kind/lookupname 値として使用された場合、SQLインジェクションの影響を受けます。ルックアップ名と種類の選択を既知の安全なリストに制限しているアプリケーションは影響を受けません。 使い方 開始 git clone https://github.com/coco0x0a/CTFCVE-2022-34265 cd CVE-2022-34265 sudo...

-CVE-2024-3094-Vulnerability-Checker-Fixer-Public

サポートのお願い このスクリプトが役に立ち、CVE-2024-3094 からシステムを保護する助けとなった場合は、スター ⭐ を付けていただくことをご検討ください。このリポジトリにスターを付けることは、あなたのサポートを示すだけでなく、より多くの人々がサイバーセキュリティ向上のための私たちの共同作業を発見し、その恩恵を受けられるようにもなります。 リポジトリにスターを付けるには、このページ上部の「Star」ボタンをクリックするだけです。あなたのサポートに心から感謝します! デジタル世界をより安全な場所にするためのご協力に感謝します。 CVE-2024-3094 とは...