CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC Когда файл обрабатывается DDPlus Unified Decoder от Dolby, возможна запись за пределами границ буфера при обработке данных эволюции. Декодер записывает информацию об эволюции в большой непрерывный буфер, похожий на heap, содержащийся в более крупной...

TRACE

TRACE: Адаптивное самоэволюционирующее агентное джейлбрейкинг-решение с учётом задач Обзор Декомпозиция задач на основе схем. Чтобы снизить сложность атаки, мы разработали около 20 процедурных схем декомпозиции, позволяющих разбить сложную вредоносную задачу на относительно безобидные и простые...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS: отражённый XSS v3.2.3 Автор: Sergio Описание: Отражённая уязвимость межсайтового скриптинга XSS в процессе подключения при установке Evolution v.3.2.3 позволяет локальному злоумышленнику выполнять произвольные веб-сценарии с помощью специально сформированного пейлоада, внедряемого ...

-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options

XSS réfléchi dans Evolution CMS v3.2.3 Auteur : Sergio Description : Multiples vulnérabilités de Cross-Site Scripting XSS réfléchi dans le processus d'installation d'Evolution v.3.2.3, options Admin, permettent à un attaquant local d'exécuter des scripts web arbitraires via une charge utile...

CVE-2026-87575-CVE-2026-87606-CVE-2026-87491-and-CVE-2026-85046.-Escape-the-v8-carcass.

CVE-2026-85046 + CVE-2026-87491 + CVE-2026-87606 + CVE-2026-87575 Вот это головная боль — вытащить путь из рендерера. 550 мг кофеина и всю ночь напролёт по CVE в Chrome — и ты тоже сможешь вырваться из рендерера. CVE-2026-85046 повреждает Float64Array для чтения/записи в V8-cage. CVE-2026-87491...

[SECURITY] [DLA 4796-1] evolution-data-server security update

Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/ Andreans Henriksson September 25, 2026 https://wiki.debian.org/LTS Package : evolution-data-server Version : 3.46.4-2+deb12u1 CVE ID : CVE-2026-2604 Debian Bug : 1128332 An issue has been found in...

Debian dla-4796 : evolution-data-server - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4796 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4796-1 [email protected] https://www.debian.org/lts/security/...

[SECURITY] Fedora 45 Update: evolution-ews-3.62.0-1.fc45

This package allows Evolution to interact with Microsoft Exchange servers, versions 2007 and later, through its Exchange Web Services EWS interface...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-1.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 45 Update: evolution-3.62.0-1.fc45

Evolution is the GNOME mailer, calendar, contact manager and communications tool. The components which make up Evolution are tightly integrated with one another and act as a seamless personal information-management tool...

Fedora 45 : evolution / evolution-data-server / evolution-ews (2026-5debc0de2b)

The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-5debc0de2b advisory. Update to 3.62.0 evolution-data-server Bug Fixes: I660 - GOA EWS: Do not require OABUrl in autodiscover I662 - EBackend: Document how OAuth2 sources should a...

CVE-2026-94214

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack...

CVE-2026-94216

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is...

CVE-2026-94216

An open redirect vulnerability affects ST Engineering iDirect Evolution and Velocity WebServer Evolution (up to build 20260717). The flaw resides in the authorize function of the file /usr/sbin/webserver, specifically in the HTTP Header Handler component. Manipulating the Success argument allows ...

EUVD-2026-83907

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This vulnerability affects the function authorize of the file /usr/sbin/webserver of the component HTTP Header Handler. Executing a manipulation of the argument Success can lead to...

CVE-2026-94216 ST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is...

CVE-2026-94216 ST Engineering iDirect Evolution/Velocity WebServer Evolution HTTP Request authorize response splitting

A vulnerability was determined in ST Engineering iDirect Evolution and Velocity WebServer Evolution. This vulnerability affects unknown code of the file /authorize of the component HTTP Request Handler. Executing a manipulation of the argument Success can lead to http response splitting. It is...

CVE-2026-94214 ST Engineering iDirect Evolution/Velocity WebServer Evolution Location Header redirect

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack...

CVE-2026-94214 ST Engineering iDirect Evolution/Velocity WebServer Evolution Location Header redirect

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the component Location Header Handler. Performing a manipulation of the argument Host results in open redirect. It is possible to initiate the attack...

EUVD-2026-83902

A vulnerability was found in ST Engineering iDirect Evolution and Velocity WebServer Evolution up to 20260717. This affects an unknown part of the file /login.html of the component Management Service. Performing a manipulation of the argument Host results in open redirect. It is possible to...