417804 matches found
CVE-2026-33693
CVE-2026-33693 : SSRF via contournement 0.0.0.0 dans activitypub-federation-rust v4isinvalid CVSS 6.5 Modéré Mots-clés : SSRF, 0.0.0.0, contournement de validation IP, activitypub-federation, Lemmy, Rust, ActivityPub Table des matières Aperçu Détails de la vulnérabilité Analyse technique Chaîne...
cifswitch-check
cifswitch-check Un script shell pour vérifier si un système Linux est exposé à CIFSwitch CVE-2026-46243 — une vulnérabilité d'escalade de privilèges locale dans le client CIFS/SMB du noyau Linux, présente depuis 2007. Fonctionne sur les machines physiques, les VM et dans les conteneurs. Conçu pou...
CVE-2026-31431-CopyFail-static-ELF--POC
CVE-2026-31431: Copy Fail - 587바이트 정적 ELF 저는 이 버그를 발견하지 않았습니다. 공로는 Xint Code / Theori에게 있습니다. 이 저장소는 익스플로잇을 가능한 한 작게 만드는 제 방식입니다 - 587바이트로 전체 LPE를 수행하는 수제 x8664 ELF입니다. libc도, 링커도, 런타임도 없습니다. 그저 NASM과 고집뿐입니다. 실질적으로, 커널은 AFALG + splice를 통해 읽기 가능한 파일의 페이지 캐시에 쓰기 프리미티브를 제공합니다. setuid 바이너리의 엔트리 포인트를...
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal
A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...
encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue
A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...
Important: Red Hat Security Advisory: osbuild-composer security update
An update for osbuild-composer is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...
iron-proxy
iron-proxy Le problème Les jobs CI, les agents d'IA de codage et les conteneurs sandbox peuvent émettre des requêtes sortantes arbitraires. Une dépendance compromise, une injection de prompt ou une étape de build malveillante peut exfiltrer des secrets, communiquer avec un serveur distant ou ouvr...
s26-m1q-ghostlock-selinux
S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — uid=0 root + KernelSU 激活达成 针对 Samsung Galaxy S26（SM-S942U1，codename m1q，SoC SM8850 骁龙 8 Elite Gen2， 内核 6.12.30-android16-5-android16-5-pd30ff70，Android 16）的 CVE-2026-43499（GhostLock）提权研究。 ✅ 最终结果：uid=0 root + KernelSU 激活达成 root@kitploit: exploit 后通过...
jsch
Fork de JSch-0.1.55 Voir le README original Pourquoi devriez-vous utiliser cette bibliothèque ? Comme je l'ai expliqué dans un article de blog, les principaux points sont : OpenSSH a désactivé ssh-rsa par défaut dans la version 8.8 et vous avez besoin d'une bibliothèque qui prend en charge...
CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
DEBIAN-CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
ALPINE-CVE-2026-78410
A flaw was found in util-linux. Restricted bind mounts take the source path from fstab but do not pin that source before the privileged mount. A local unprivileged user who can replace the authorized source or a writable ancestor can redirect SUID mount8 to bind another host directory. If the fst...
OpenNebula-CVE-2025-56536
OpenNebula-CVE-2025-56536 Titre de l'exploit : OpenNebula 6.10.0.1 - XSS stocké Cross-site Scripting dans les informations utilisateur Auteur de l'exploit : Mark Artamonov Page d'accueil du fournisseur : https://opennebula.io/ Version testée : OpenNebula 6.10.0.1 Versions affectées : OpenNebula...
CVE-2021-3560-exploit
CVE-2021-3560 — Élévation de privilèges Polkit CVE-2021-3560 est une vulnérabilité locale d'élévation de privilèges dans Polkit anciennement PolicyKit, le cadre d'autorisation utilisé par les environnements de bureau Linux. Un attaquant local non privilégié peut exploiter une condition de course...
CVE-2026-31431
CVE-2026-31431 : Présentation de la vulnérabilité ID CVE : CVE-2026-31431 Surnom : Copy Fail Niveau de gravité : Élevé score CVSS v3 : 7.8 Type de vulnérabilité : Élévation locale de privilèges LPE Composant affecté : module algifaead du noyau Linux interface cryptographique AFALG Prérequis...
Nexora
Nexora Nexora هو نظام ذكي لحوكمة نقاط النهاية وأمن المعلومات مدعوم بالذكاء الاصطناعي، يراقب استخدام البرامج عبر الأجهزة، ويطبق تصنيف المخاطر القائم على السياسات، وينتج تقارير سلوكية وأمنية منظمة. تم تصميمه للبيئات التي تحتاج فيها المؤسسات إلى رؤية استخدام التطبيقات، وفرض قواعد حوكمة البرامج،...