2120437 matches found
CVE-2026-86466 Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...
CVE-2026-86466
Apache Airflow FAB provider (apache-airflow-providers-fab) contains an authentication bypass in the Authentik OAuth path of its FAB auth manager. The issuer and audience claims of the accepted id_token are not validated, allowing an attacker who holds a valid token minted by the same Authentik id...
EUVD-2026-80327
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...
CVE-2026-86466 Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...
CVE-2026-86466 Apache Airflow FAB provider: FAB Authentik provider: id_token issuer/audience not validated
Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or audience claims of the idtoken it accepts. An attacker holding a token that the same Authentik identity provider minted for a different client application can present it to Airflow and be...
vpod v0.8.4
Vpod Live demo • Getting Started • Documentation • Issues • Contributing What is a vpod ? A vpod is a lightweight, portable sandbox that gives an untrusted process an instant Linux environment. It uses a RISC‑V architecture and runs entirely inside WebAssembly. Fast startup : Boot in under a...
cve-2024-21413-outlook-monikerlink-lab
CVE-2024-21413 — Outlook Moniker Link Lab / PoC Notes de laboratoire éducatives et une petite preuve de concept PoC démontrant le déroulement de l'attaque CVE-2024-21413 dans un environnement contrôlé lab de style TryHackMe. ⚠️ À des fins éducatives uniquement. Ne l'utilisez pas contre des système...
CVE-2026-2636_PoC
CVE-2026-2636: Невосстановимое состояние CLFS.sys, приводящее к BSoD Обзор CVE-2026-2636 — это уязвимость в драйвере Windows Common Log File System CLFS CLFS.sys. Непривилегированный пользователь может вызвать невосстановимое состояние системы, вызвав API ReadFile для дескриптора, открытого через...
CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block
In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...
CVE-2026-89778
CVE-2026-89778 is an out-of-bounds page array access in the Linux kernel's zisofs (compressed ISO9660) filesystem. The root cause is in zisofs_uncompress_block()'s empty-block fast path, which returns pcount <
CVE-2026-89778
In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...
CVE-2026-89778 isofs: fix out-of-bounds page array access on empty zisofs block
In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...
EUVD-2026-80299
In the Linux kernel, the following vulnerability has been resolved: isofs: fix out-of-bounds page array access on empty zisofs block zisofsuncompressblock's empty-block fast path returns pcount 17, so a crafted "ZF" Rock Ridge record can set it below PAGESHIFT; the bug is reached by an ordinary...
USN-8514-2 openssh vulnerability
USN-8514-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root using the legacy scp...
USN-8514-2: OpenSSH vulnerability
USN-8514-1 fixed a vulnerability in OpenSSH. This update provides the corresponding fix for Ubuntu 14.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: It was discovered that OpenSSH incorrectly handled file permissions when downloading files as root using the legacy scp...
CVE-2026-33147
CVE-2026-33147 CVE-2026-33147 переполнение буфера на основе стека в gmtremotedatasetid Краткое описание Уязвимость переполнения буфера на основе стека была обнаружена в функции gmtremotedatasetid в файле src/gmtremote.c. Проблема возникает при передаче специально сформированной длинной строки в...
kata-containers v4.2.0
Kata Containers Welcome to Kata Containers! This repository is the home of the Kata Containers code for the 2.0 and newer releases. If you want to learn about Kata Containers, visit the main Kata Containers website. Introduction Kata Containers is an open source project and community working to...
CVE-2026-4447
CVE-2026-4447 - V8 в Google Chrome до удаленного выполнения кода Быстрое использование root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Примечания по эксплуатации Серьезность: ВЫСОКАЯ CVSS: 8.8 Воздействие: Конфиденциальность, Целостность, Доступность...
CVE-2026-27565
An unauthenticated remote attacker can upload a malicious IODD file that places and executes a shell script with root privileges. The shell script remains active even after a reboot...
CVE-2026-27555
A low-privileged remote attacker can exploit a local file inclusion vulnerability in the /index.php/ajax/getioddportinfo endpoint using a valid user cookie allowing execution of arbitrary PHP code on the device...