CVE-2026-51302-PoC

CVE-2026-51302: 技術的不整合 クリックベイトなリポジトリ名で申し訳ないが、このCVEは完全にLLMが幻覚しただけのゴミであり、主張がこれほど矛盾しているのにCNAがこれを受理したのを見ると本当に悲しい 💔 結論 CVE-2026-51302 は実在しません 😱 公開されたSQLでは、AddressSanitizer 環境下のいずれの SQLite 3.41 リリースでも use-after-free を再現できません。さらに重要なことに、記載された根本原因は影響を受けるソースと完全に矛盾しています: exprComputeOperands は SQLite...

CVE-2022-29072

CVE-2022-29072 7-Zip 21.07以前のWindows版では、.7z拡張子のファイルをヘルプコンテンツ領域にドラッグすると、特権昇格とコマンド実行が可能になります。 不確実性 このCVEに関しては、一般にかなりの不確実性があります。NISTの脆弱性詳細では、このCVEのステータスを「分析待ち」としています。...

CVE-2023-24055

免責事項 このスクリプトは教育およびデモンストレーション目的でのみ使用されます。作者は、このスクリプトを犯罪や悪意のある活動に使用することを推奨または容認しておらず、明示的に許可された適切な許可がある場合にのみ使用すべきです。 このスクリプトは注意して使用してください。KeePassの設定ファイルを変更し、以前に設定されたトリガーを削除します。このスクリプトを使用すると、予期しない動作が発生し、KeePassアプリケーションが壊れる可能性があります。自己責任で使用してください。 はじめに このスクリプトは、バージョン2.53までのKeePass（デフォルトインストール）における 論争中...

Astra Linux – Vulnerability in unbound

Before version 1.9.5, Unbound allowed an out-of-bounds write operation through a compressed name in rdatacopy. NOTE: The vendor disputes that this is a vulnerability. Although the code may be vulnerable, an ongoing Unbound installation cannot be remotely or locally exploited...

EUVD-2025-210894

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...

CVE-2025-64059

Grav 1.7.50.2 allows administrators to inject JavaScript through the Home Page editor , a potential stored XSS vector. However, the practical relevance is disputed : since admins already possess the ability to modify templates, install plugins, and upload other executable content, the additional ...

CVE-2025-64059

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: glibc (UTSA-2023-000634)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000634 advisory. DISPUTED A vulnerability was found in GNU C Library 2.38. It has been declared as critical. This vulnerability affects the function monstartup of the file gmon.c of...

PT-2026-90946

Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. NOTE: the relevance of this for stored XSS is disputed because admins are allowed to modify templates, install plugins, and upload other executable content...

CVE-2026-53924

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. Prior to 0xc9d4e0dacd937364793278180551e59d93cd43f9, StreamingEscrow.claim correctly rejects withdrawals while an escrow is...

EUVD-2026-70524

Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. Prior to 0xc9d4e0dacd937364793278180551e59d93cd43f9, StreamingEscrow.claim correctly rejects withdrawals while an escrow is...

CVE-2026-53924

Gardens v2 , a modular on-chain governance framework, contains a logic flaw in the StreamingEscrow contract. While claim() correctly rejects withdrawals during a dispute, the permissionless syncOutflow() path performs the same excess-balance transfer without checking the disputed state . After a ...

BELL-CVE-2026-74357 CVE-2026-74357 does not affect BellSoft software

Bulletin has no description...

CVE-2026-7085

A vulnerability was determined in HBAI-Ltd Toonflow-app up to 1.1.1. This vulnerability affects the function z.url of the file src/routes/setting/about/downloadApp.ts of the component downloadApp Endpoint. This manipulation of the argument url causes path traversal. It is possible to initiate the...

SUSE CVE-2019-12380

DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and eficallphysprolog in arch/x86/platform/efi/efi64.c mishandle memory allocation failures. NOTE: This id is disputed as not being an issue because...

CVE-2025-69599

RayVentory Scan Engine through 12.6 Update 8 allows attackers to gain privileges if they control the value of the PATH environment variable. NOTE: this is disputed because ability of an attacker to control the environment is a site-specific misconfiguration...

PT-2026-35350

A vulnerability was found in HBAI-Ltd Toonflow-app up to 1.1.1. This affects the function fetch of the file src/routes/setting/vendorConfig/getCodeByLink.ts of the component getCodeByLink Endpoint. The manipulation of the argument Link results in server-side request forgery. The attack may be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-013257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013257 advisory. DISPUTED An issue was discovered in the efi subsystem in the Linux kernel through 5.1.5. physefisetvirtualaddressmap in arch/x86/platform/efi/efi.c and...

EUVD-2026-9297

A vulnerability was determined in Tuya App and SDK 24.07.11 on Android. Affected by this vulnerability is an unknown functionality of the component JSON Data Point Handler. This manipulation of the argument cruisetime causes denial of service. Remote exploitation of the attack is possible. The...

CVE-2025-63205

An issue was discovered in bridgetech probes VB220 IP Network Probe,VB120 Embedded IP + RF Probe, VB330 High-Capacity Probe, VB440 ST 2110 Production Analytics Probe, and NOMAD, firmware versions 6.5.0-9, allowing attackers to gain sensitive information such as administrator passwords via the...