2115312 matches found
CVE-2026-89497
A flaw was found in the Linux kernel's Orange File System orangefs client. The orangefspreparecdmarray function incorrectly calculates the buffer size for client debug keywords when an entry starts with a space. This can lead to a buffer overflow, allowing data to be written beyond the intended...
CVE-2026-89682
A flaw was found in the Linux kernel's NFS daemon nfsd component. The nfsdfiledisposelistdelayed function, responsible for deferring file disposal, uses a separately allocated structure for its freeme queue. During network namespace teardown, this structure can be prematurely freed. This allows...
CVE-2026-37073
CVE-2026-37073 Control de acceso incorrecto en /vfm-admin/ajax/sendfiles.php en Veno File Manager Project 4.4.9 permite a un atacante no autenticado enviar correos electrónicos desde el servidor SMPT configurado en la aplicación mediante una solicitud POST al endpoint con los parámetros y...
Vlun-Agent-X
VulnAgent-X 研究原型 VulnAgent-X 是一个面向论文复现的多 Agent 漏洞/缺陷检测原型。 输入本地仓库或 diff，输出结构化 findings、证据链、定位结果、置信度和实验日志。 核心能力 输入形式：repo path 或 unified diff 工作流：screening - context expansion - scheduler - router - experts - sceptic - verificationstub - evidence fusion 输出字段： issuetype locationfile + line range...
CVE-2026-48907
CVE-2026-48907 — Joomla 内容编辑器 JCE ≤ 2.9.99.4 中的未认证 RCE CVE-2026-48907 的概念验证利用程序——一个 CVSS 10.0 的预认证远程代码执行漏洞，存在于 Joomla 内容编辑器 JCE 扩展中。 由 Grayxploit 安全团队 研究 目录 概述 受影响版本 漏洞详情 攻击流程 概念验证 补丁分析 修复建议 时间线 参考 免责声明 概述 CVE-2026-48907 是一个影响 Joomla 内容编辑器 JCE 扩展的严重未认证远程代码执行 RCE 漏洞。JCE 是最广泛安装的 Joomla 编辑器，所有版本包括...
watchTowr-vs-progress-moveit_CVE-2024-5806
CVE-2024-5806 为 Progress MOVEit Transfer CVE-2024-5806 的利用程序。参见我们的博客文章 待定。 PoC 实战演示 请参阅 --help 获取帮助。典型的运行示例如下： root@kitploit: python CVE-2024-5806.py --target-ip 192.168.1.1 --target-user user2 --ppk id.ppk --pem id / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | /...
DEBIAN-CVE-2026-89772
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the foliocleardirtyforio call in extentwritecachepages with a plain foliotestdirty check. Besides clearing th...
AZL-100442 CVE-2026-89768 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...
DEBIAN-CVE-2026-89768
In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...
CVE-2026-89772
In the Linux kernel, the following vulnerability has been resolved: btrfs: write-protect folios during data writeback commit 095be159f3eb "btrfs: unify folio dirty flag clearing" replaced the foliocleardirtyforio call in extentwritecachepages with a plain foliotestdirty check. Besides clearing th...
CVE-2026-89768
In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backingfileopen derives the path to be stored in the new backing file from userfile-fpath. This is incorrect when userfile itself is a backing file, which is the case for nested stacking...
AZL-100347 CVE-2026-89761 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...
DEBIAN-CVE-2026-89761
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...
DEBIAN-CVE-2026-89762
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...
CVE-2026-89761
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix out-of-bounds write when null terminating a label vec aavecunique null terminates at vecn - dups when VECFLAGTERMINATE is passed. If the components are all distinct no duplicates are dropped, dups is 0 and the...
DEBIAN-CVE-2026-89766
In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...
AZL-100791 CVE-2026-89762 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...
CVE-2026-89762
In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begincurrentlabelcritsection AppArmor's begincurrentlabelcritsection is a scary function called from lots of LSM hooks in particular VFS/socket-related ones that checks if the label referenced by...
CVE-2026-89766
In the Linux kernel, the following vulnerability has been resolved: pidfd: hold execupdatelock around namespace ioctl The PIDFDGETNAMESPACE ioctls in pidfdioctl perform a filesystem credentials ptrace access check before handing out a namespace file descriptor. The accompanying comment states tha...
DEBIAN-CVE-2026-89752
In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...