346136 matches found
CVE-2026-22010-Android-Intent-Redirection-to-Exported-Component
CVE-2026-22010 – エクスポートされたコンポーネントへのAndroidインテントリダイレクト プログラムコード（Java/Android シミュレーション） root@kitploit: // VulnActivity.java - Exported activity that forwards intents public class VulnActivity extends Activity @Override protected void onCreateBundle b super.onCreateb; Intent incoming = getIntent; //...
Antignis
Antignis root@kitploit: , , . . '..' / \ / ||| || '-, ,-' / /\ \ / \ \ |/ \ / | |/ / '. .:. .' / | \ | \ | | / // | \ |\ \ '|Y|' | /| /| |\ /|| // , \ / , / / // / / ,- I -, | /=\ | ,-' |=| '-, - / Link to blogpost:...
QuickBox-Pro-2.1.8-Authenticated-RCE
QuickBox-Pro-2.1.8-Authenticated-RCE 認証済みの低権限ユーザーは、コマンドインジェクションの脆弱性を悪用して www-data としてコードを実行し、脆弱な sudo ルールにより root への権限昇格が可能です。 QuickBox Pro v2.1.8 およびそれ以前のバージョンが影響を受けます。...
NGINX_2026_CVE_Bundle_CTI_Report
🛡️ NGINX 2026 多CVE CTI 调查 CVE-2026-28755 • CVE-2026-42926 • CVE-2026-9256 • CVE-2026-42055 • CVE-2026-42533 创建者：Pratik Chhetri 报告日期： 2026-07-28 📌 执行摘要...
hassh
"HASSH" - SSHクライアントおよびサーバーのプロファイリング手法。 注記：このCorelightリポジトリは、元のリポジトリがメンテナンスされていないSalesforceからの要請に応じて、積極的にメンテナンスできるように作成されました。 "HASSH" は、特定のSSHクライアントおよびサーバー実装を識別するために使用できるネットワークフィンガープリンティング標準です。フィンガープリントは、MD5フィンガープリントの形式で簡単に保存、検索、共有できます。 HASSHでできること：...
CVE-2026-90817
CVE-2026-90817 — REDCap Survey Passthru + Data Import RCE CVE-2026-90817 Securifera / Ryan Wincey 向けの Python 3 チェッカーおよび設定可能なエクスプロイトフック。 | ---|--- 製品| REDCap Vanderbilt 影響を受けるバージョン| ≥ 13.3.0 ブランチパッチまで 修正済み| 16.0.49 LTS、17.3.10 LTS、17.4.4 Standard+ CVSS 3.1| 9.8 Critical 認証| なし —...
CVE-2026-93235 f2fs: fix to zero post-EOF data when extending file size
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad --- tests/generic/794.out 2026-06-12 08:46:32.766426241 +0800 +++...
CVE-2026-93235
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad --- tests/generic/794.out 2026-06-12 08:46:32.766426241 +0800 +++...
EUVD-2026-86240
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad --- tests/generic/794.out 2026-06-12 08:46:32.766426241 +0800 +++...
CVE-2026-93235
The Linux kernel f2fs filesystem contains a vulnerability where extending a file size across an unaligned EOF boundary (via truncate , fallocate , or write ) could fail to zero out post-EOF data in the partial page. This flaw could expose stale disk data after a remount or crash recovery. The fix...
CVE-2026-93235 f2fs: fix to zero post-EOF data when extending file size
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to zero post-EOF data when extending file size generic/794 4s ... - output mismatch see /share/git/fstests/results//generic/794.out.bad --- tests/generic/794.out 2026-06-12 08:46:32.766426241 +0800 +++...
CVE-2026-93226
The Linux kernel contains a race condition in the ipv6 networking stack. The function rt6_nh_dump_exceptions() improperly uses hlist_for_each_entry() to iterate over RCU-protected exception lists . Because the caller holds rcu_read_lock() but fails to hold rt6_exception_lock, the function rt6_ins...
CVE-2026-93226 ipv6: use RCU iterator to dump route exceptions
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds rcureadlock, but does not hold rt6exceptionlock, so rt6insertexception can...
EUVD-2026-86231
In the Linux kernel, the following vulnerability has been resolved: ipv6: use RCU iterator to dump route exceptions rt6nhdumpexceptions uses hlistforeachentry to iterate over RCU-protected exception lists. The caller holds rcureadlock, but does not hold rt6exceptionlock, so rt6insertexception can...
CVE-2026-82094
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to traverse directories on the system due to improper limitation of a pathname to a restricted directory...
CVE-2026-81552
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of environment variables...
CVE-2026-82093
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to unsafe deserialization of untrusted data...
CVE-2026-81539
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command...