AZL-106806 CVE-2026-93320 affecting package moby-engine 25.0.3-20

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

smt878u-ionstack-poc

smt878u-ionstack-poc !CAUTION هذا المشروع غير مكتمل — لا يعمل بعد. لا يوجد root عامل على أي جهاز حتى تاريخ 2026-10-03. لا تتوقع أن ينجح البدء السريع أدناه. اقرأ الحالة الحالية قبل بناء أو تشغيل أي شيء. !WARNING الحالة: قيد العمل / متوقف لم يتحقق: root دائم أو حتى لمرة واحدة على SM-T878U. آخر فشل...

CVE-2026-93320

BuildKit is vulnerable to a flaw where it may be tricked into performing file actions using special file inodes instead of the expected regular files. This behavior can lead to blocked operations or, in environments with rootful workers , potentially allow unintended host device access . No speci...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

EUVD-2026-92539

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-93320 BuildKit improperly handles special files in build snapshots

BuildKit may be tricked into performing file actions with special file inodes where regular files are expected. Special files may block operations or, on rootful workers, allow unintended host device access...

CVE-2026-104976 Plane: SSRF in Gitea OAuth

Plane is an open-source project management tool. Prior to 1.4.0, Plane validates GITEAHOST only for its URL scheme and does not reject hosts that resolve to private or internal IP addresses. The four outbound requests in the Gitea OAuth flow are derived from this unvalidated host and do not call...

Remote-Buffer-overflow-CVE-2003-0172

ثغرة تجاوز سعة المخزن المؤقت عن بُعد - CVE-2003-0172 ┌──cyberdesu㉿MSI- └─$ python3 buffer.py usage: exploit.py...

CVE-2026-27495

CVE-2026-27495 — Échappement du bac à sable du n8n JS Task Runner Échappement du bac à sable du n8n JavaScript Task Runner via une fuite d'objet host-realm. | ---|--- CVE| CVE-2026-27495 CVSS| 9.4 Critical CWE| CWE-94 — Code Injection Affecté| n8n 1.123.22 / 2.0.0–2.9.2 / 2.10.0 Corrigé| 1.123.22...

CVE-2026-59786

A flaw was found in Zabbix. A remote, unauthenticated attacker with network access to the trapper port can spoof host availability, compromising the integrity of monitoring data. The Zabbix server and proxy accept active agent heartbeat messages without verifying configured pre-shared key PSK or...

CVE-2026-59785

A flaw was found in Zabbix. The host search functionality in the web frontend allows filtering against fields that are not displayed, including stored Intelligent Platform Management Interface IPMI and Pre-Shared Key PSK credentials. An authenticated attacker with read access can exploit this by...

CVE-2023-25157

CVE-2023-25157 यह एक सरल Python स्क्रिप्ट है जो नवीनतम GeoServer SQL इंजेक्शन कमजोरी का पता लगाने के लिए है। आप होस्ट पर स्क्रिप्ट का उपयोग संक्रमित पथ की जांच करने के लिए कर सकते हैं। स्थापना: 1. git clone https://github.com/0x2458bughunt/CVE-2023-25157/ 2. cd CVE-2023-25157 3. chmod +x...

Malicious code in css-nrmgzn-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4522148c469356aa7799c831ce547d2ae612ac40621e5110ad5d5125bf2f2684 The package presents itself as a CSS polyfill but on require of thunderboltRegistry.js runs an IIFE that invokes childprocess.execSync for id, whoami...

MAL-2026-17576 Malicious code in css-nrmgzn-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4522148c469356aa7799c831ce547d2ae612ac40621e5110ad5d5125bf2f2684 The package presents itself as a CSS polyfill but on require of thunderboltRegistry.js runs an IIFE that invokes childprocess.execSync for id, whoami...

MAL-2026-17575 Malicious code in css-kfvwax-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2041e61cd16558aaaeac8a2f26024866a6b949d93817f78de744c5c1781023df On require, thunderboltRegistry.js runs an IIFE that shells out via childprocess to collect host identity id, whoami, uname -a, network interface...

Malicious code in css-kfvwax-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2041e61cd16558aaaeac8a2f26024866a6b949d93817f78de744c5c1781023df On require, thunderboltRegistry.js runs an IIFE that shells out via childprocess to collect host identity id, whoami, uname -a, network interface...

MAL-2026-17574 Malicious code in css-gwqyid-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a81a389193175e49648e711d4eb83ebcbbd0b51e1b7a6677ceb338c3398dc19 thunderboltRegistry.js executes an IIFE on module load that collects host reconnaissance id, whoami, full process environment via env, and ifconfig/i...

Malicious code in css-gwqyid-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a81a389193175e49648e711d4eb83ebcbbd0b51e1b7a6677ceb338c3398dc19 thunderboltRegistry.js executes an IIFE on module load that collects host reconnaissance id, whoami, full process environment via env, and ifconfig/i...