CVE-2026-15603 morgan vulnerable to Log Forging via unescaped Unicode line separators

morgan is an HTTP request logger middleware for Node.js. In versions prior to 1.12.0, the internal helper that escapes log token values did not neutralize the Unicode line separator characters U+0085 Next Line, U+2028 Line Separator, and U+2029 Paragraph Separator. An unauthenticated remote clien...

CVE-2026-58106 Incomplete fix for CVE-2025-40843: safe_strcpy is called with PATH_MAX into fullPath+2, writing 2 bytes past the buffer on every CodeChecker log invocation

CVE-2025-40843 https://github.com/advisories/GHSA-5xf2-f6ch-6p8r was fixed by replacing unchecked strcpy with a bounded safestrcpy helper. At ldlogger-tool-gcc.c:129 the destination passed to that helper is fullPath + 2, but the size passed down is the full PATHMAX. safestrcpy is strncpy, which...

CVE-2026-58106

CodeChecker through 6.28.2 contains an incomplete fix for CVE-2025-40843. In ldlogger-tool-gcc.c:129 , the bounded helper safe_strcpy() is called with the full PATH_MAX size, but the destination is fullPath + 2 , leaving only 4094 bytes. Because safe_strcpy() is a strncpy() that NUL-pads to the f...

CVE-2026-9973-exploit

CVE-2026-9973 Fehlerbehebung https://chromium-review.googlesource.com/c/v8/v8/+/7822799 root@kitploit: wasmturboshaft Fix Phi handling in Load Elimination some more Multiple Phis can depend on each other, so we have to clear all their replacements up front. Fixed: 509268941 Change-Id:...

CVE-2018-6389-FIX

Questo repository non contiene un README...

CVE-2023-37582_EXPLOIT

CVE-2023-37582EXPLOIT Demo di sfruttamento della vulnerabilità di scrittura arbitraria di file in Apache RocketMQ Panoramica In realtà, la vulnerabilità di scrittura arbitraria di file CVE-2023-37582 in Apache RocketMQ è già stata affrontata nella vulnerabilità RCE CVE-2023-33246. Tuttavia, la...

CVE-2022-30190_Temporary_Fix_Source_Code

🩹CVE-2022-30190 Fix Temporaneo🩹 Codice Sorgente Questi sono i codici sorgente di due script Python compilati per applicare facilmente e rapidamente una protezione temporanea contro la vulnerabilità CVE-2022-30190 Follina Entrambi possono essere programmati meglio, ma questo serve solo a...

CVE-2021-36934

CVE-2021-36934 Correzione per la CVE-2021-36934 Lo script verrà eseguito e controllerà se il tuo sistema è interessato, quindi applicherà la correzione...

RHSA-2026:59028 Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Bulletin has no description...

CVE-2020-9038

CVE-2020-9038 Report di divulgazione di CVE-2020-9038 Maggiori informazioni: https://github.com/laurent22/joplin/commit/3db47b575b9cb0a765da3d283ba https://nvd.nist.gov/vuln/detail/CVE-2020-9038 https://vulners.com/cve/CVE-2020-9038...

CVE-2019-9053-Exploit-in-Python-3

CVE-2019-9053-Exploit-in-Python-3 Questo è un exploit utilizzato in TryHackMe's EasyCTF Tuttavia, il codice installato in Kali Linux o presente su exploitDB è basato sul vecchio codice Python 2. Questa è una riscrittura di quel codice, con alcune revisioni apportate durante il cracking dell'hash...

ROOT-APP-NPM-CVE-2023-44270 CVE-2023-44270 in postcss - Patched by Root

Root has patched CVE-2023-44270 in the postcss package for Root:npm. Multiple fixed versions available...

aapanel-ws-bypass

aaPanel: i vendor non sempre correggono le cose correttamente Una correzione incompleta per CVE-2021-37840 espone ancora 3,6 milioni di server a RCE come root, 5 anni dopo Scoperto da: EON Security CVE: Assegnazione in sospeso CVSS: 8.8 Alto — AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Interessati:...

ROOT-APP-NPM-GHSA-CMWH-PVXP-8882 GHSA-cmwh-pvxp-8882 in dompurify - Patched by Root

Root has patched GHSA-cmwh-pvxp-8882 in the dompurify package for Root:npm. Multiple fixed versions available...

ROOT-APP-NPM-CVE-2026-49978 CVE-2026-49978 in dompurify - Patched by Root

Root has patched CVE-2026-49978 in the dompurify package for Root:npm. Multiple fixed versions available...

CVE-2026-80677 driver core: use READ_ONCE() for dev->driver in dev_has_sync_state()

In the Linux kernel, the following vulnerability has been resolved: driver core: use READONCE for dev-driver in devhassyncstate devhassyncstate reads dev-driver twice without holding devicelock -- once for the NULL check and once to dereference -syncstate. Some callers only hold...

CVE-2026-80670

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80647

In the Linux kernel, the following vulnerability has been resolved: RDMA/hns: Fix warning in poll cq direct mode CQs allocated by iballoccq always have a comphandler. Though in direct mode this handler is never expected to be called, it is still called when the driver is reset, triggering the...

CVE-2026-80639

In the Linux kernel, the following vulnerability has been resolved: cxl/test: Fix fortifypanic Fix a runtime assertion in setupxormapping. Fortify complains that it is potentially overflowing the xormaps array per countedbynrmaps. Quiet the false positive by initializing @nrmaps earlier. memcpy:...

CVE-2026-80611

In the Linux kernel, the following vulnerability has been resolved: ACPI: processoridle: Mark LPI enter functions as cpuidle When function tracing or Kprobes is enabled, entering an ACPI Low Power Idle LPI state triggers the following RCU splat: RCU not on for: acpiidlelpienter+0x4/0xd8 WARNING:...