479 matches found
gdcm-security-poc
GDCM findings 1-6: 再現パッケージ GDCM における6件のパーサー/コーデック欠陥を、v3.2.6 上でサニタイザー障害または有界な伝播チェックとして再現したもの。各自動トリガーには、脆弱なシグナルを発生させないほぼ有効なコントロールが付属する。Finding 1 には計装された制御フロープリミティブも含まれる。 メンテナーおよび脆弱性コーディネーターのレビューを目的とする。何かを実行する前に SAFETY.md を読むこと。 固定ターゲット manifest/targets.env: 名前| リビジョン| 内容 ---|---|--- vulnerable|...
Linux Distros Unpatched Vulnerability : CVE-2026-84144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant...
CVE-2026-84143
Internally found bugs present in Thunderbird 154, Thunderbird ESR 153.1 and Thunderbird ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was...
CVE-2026-84142
Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. This vulnerability was fixed in Firefox 155 and Thunderbird 155...
Security Vulnerabilities fixed in Firefox ESR 153.2 — Mozilla
Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effort some of these could have been exploited. Internally found bugs present in...
CVE-2026-82879: Incorrect Authorization
DataEase before 2.10.26 contains multiple access control defects in the sharing link module. Tickets are not bound to the target share UUID, so a valid ticket issued for one share can be reused against another ShareTicketManage.validateTicket / POST /de2api/share/proxyInfo. The POST...
Google Chrome buffer overflow vulnerability (CNVD-2026-27213)
Chrome is a web browser developed by Google, used for accessing and managing web pages. Google Chrome has a buffer overflow vulnerability. This vulnerability arises due to memory processing defects in the V8 component, which handles JavaScript execution processes in HTML pages. Attackers can...
Google Chrome Input Validation Vulnerability (CNVD-2026-26945)
Google Chrome is a web browser used for accessing web pages and running web applications. There is a vulnerability in Google Chrome’s input validation mechanism. The vulnerability stems from memory processing defects in the V8 engine. Attackers can exploit this vulnerability by constructing HTML...
The vulnerability of the Apache Tomcat application server, related to defects in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Apache Tomcat application server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
Shopper: Authorization bypass and RBAC privilege escalation in team settings
Impact Two distinct authorization defects in the team settings allowed any authenticated panel user to take over the RBAC system: - Settings/Team/Index had no mount authorization. Any authenticated user could load the page and use its public actions to create new roles and delete other users,...
PT-2026-47166
CVE-2026-8762 - Atlassian Confluence Server-Side Request Forgery CVE ID :CVE-2026-8762 Published : June 4, 2026, 2:16 p.m. | 57 minutes ago Description :Rejected reason: After analysis, the originally reported behaviour was determined not to constitute a security vulnerability. The findings were...
EUVD-2026-34041
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect...
Varnish Cache和Vinyl Cache 环境问题漏洞
Varnish Cache is a set of reverse website caching servers provided by the Varnish company. Vinyl Cache is a high-performance HTTP reverse proxy and web application caching acceleration platform offered by the Vinyl Cache company. Versions of Vinyl Cache prior to 9.0.1 and Varnish Cache prior to...
CVE-2026-10717
Out of bounds write and reads in openSeaChest’s --showSCSIDefects in Seagate’s openSeaChest v25.05.3 on all supported platforms allows for writing defect information out of bounds for very large defects lists via a very bad drive with lots of defects or a maliciously crafted SCSI device’s defect...
CVE-2026-10717
The vulnerability CVE-2026-10717 affects openSeaChest v25.05.3 (Seagate Open-Seachest/Seachest) and specifically the --showSCSIDefects feature. Out-of-bounds writes/reads occur when handling very large defect lists or a maliciously crafted SCSI defect response length, enabling writing defect info...
Local Deep Research 代码问题漏洞
Local Deep Research is an AI search assistant developed by LearningCircuit. Versions of Local Deep Research prior to 1.6.10 contained code vulnerabilities. These vulnerabilities stemmed from defects in the URL checking logic, which could be exploited by attackers, leading to SSRF attacks...
ZTE ZXUniPOS NDS-LTE 安全漏洞
ZTE ZXUniPOS NDS-LTE is an operator network positioning platform developed by ZTE Corporation. ZTE ZXUniPOS NDS-LTE has security vulnerabilities, which stem from unsafe password schemes. These include improper selection of encryption algorithms, inadequate key management, or defects in code...
CVE-2026-42002
A flaw was found in pdns-recursor. Concurrency and locking defects in the Generic Security Service Algorithm for Secret Key Transaction Signatures GSS-TSIG could allow a remote attacker to cause a denial of service...
ZTE ZXUniPOS NDS-LTE 安全漏洞
ZTE ZXUniPOS NDS-LTE is an operator network positioning platform developed by ZTE Corporation. ZTE ZXUniPOS NDS-LTE has a security vulnerability, which stems from business logic defects. Attackers can exploit the features of legitimate applications in an unintended and abnormal manner to carry ou...
