902963 matches found
OESA-2026-3967 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3966 gstreamer1-plugins-base security update
GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: GStreamer EXIF Metadata Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to...
OESA-2026-3956 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: The nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a...
OESA-2026-3955 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: The nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a...
OESA-2026-3954 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: The nbconvert HTTP handlers in jupyterserver render user-authored notebook HTML under the Jupyter origin without a sandbox directive in their Content-Security-Policy. Combined with nbconvert.HTMLExporter's default non-sanitizing behavior, a...
OESA-2026-3950 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3949 rsync security update
Rsync is an open source utility that provides fast incremental file transfer. It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files a...
OESA-2026-3943 popt security update
The popt library exists essentially for parsing command line options. Some specific advantages of popt are no global variables allowing multiple passes in parsing argv, parsing an arbitrary array of argv-style elements allowing parsing of command-line-strings from any source, a standard method of...
OESA-2026-3944 freerdp security update
FreeRDP is a client implementation of the Remote Desktop Protocol RDP that follows Microsoft's open specifications. This package provides the client applications xfreerdp. Security Fixes: FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.20.1, a...
OESA-2026-3942 pcp security update
Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. Security Fixes: A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed...
OESA-2026-3935 webkitgtk security update
WebKitGTK is the port of the WebKit web rendering engine to the GTK platform. This package contains WebKitGTK for GTK 3 and libsoup 3. Security Fixes: A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in...
OESA-2026-3903 file-roller security update
File Roller is an archive manager that you can create and modify archives; view the content of an archive;view and modify a file contained in the archive; extract files from the archive. Security Fixes: A flaw was found in file-roller. When opening or extracting a malicious 7z or RAR archive...
OESA-2026-3902 qemu security update
QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: An unknown vulnerability exists in QEMU, with no detailed description available at this time.CVE-2026-15264 CVE-2026-18054 is a vulnerability in QEMU, details are not yet...
OESA-2026-3899 golang security update
. Security Fixes: Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.CVE-2026-33818 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client...
OESA-2026-3879 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
OESA-2026-3880 git-lfs security update
Git Large File Storage LFS replaces large files such as audio samples, videos, datasets, and graphics with text pointers inside Git, while storing the file contents on a remote server. Security Fixes: The filepath.Walk and filepath.WalkDir functions are documented as not following symbolic links,...
CVE-2025-27136
CVE-2025-27136 Exploiting an XML External Entity XXE Vulnerability. Use XML Payload to Grab Sensitive Files PoC test.xml root@kitploit: Use curl to upload test.xml from our local machine to the bucket. root@kitploit: curl -X PUT http://127.0.0.1:PORT/TB1 -H "Content-Type: application/xml" -d...
CVE-2022-35650
CVE-2022-35650 Esto es una lectura arbitraria de archivos en Moodle. Requisitos previos Debes haber comprometido un usuario a nivel de profesor o administrador. Pasos 1. Clona este repositorio: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. Ejecuta este comando para...
CVE-2022-46169
CVE-2022-46169 CVE-2022-46169 Cacti remoteagent.php Inyección de Comandos no Autenticada. Este script solo verifica las condiciones de CVE-2022-46169. ¿Qué es Cacti? Cacti es una plataforma de código abierto que proporciona un marco robusto y extensible de monitoreo operativo y gestión de fallos...