CVE-2026-10520

CVE-2026-10520 Ivanti Sentry（旧MobileIron Sentry）は、モバイルデバイスと企業バックエンドリソース（メール、SharePoint、内部Webアプリケーション）間のトラフィックをプロキシするエンタープライズセキュリティゲートウェイです。 Mobile Device Management （MDM）ポリシーを適用し、暗号化されたモバイルセッションを終了し、エンタープライズアプリの展開のために証明書ベースの認証を発行します。Sentryインスタンスは通常、インターネットに公開されたポート8443 上で動作し、MICS（Mobile Iron...

CVE-2026-93820

A flaw was found in the Linux kernel's Rockchip PCIe host controller driver. Stopping and removing a PCIe root bus without proper synchronization creates a race condition with concurrent device rescanning or hotplug operations. A local attacker could exploit this flaw to cause a use-after-free...

CVE-2026-93818

A flaw was found in the Linux kernel's PLDA PCIe host controller driver. This vulnerability can result in a Denial of Service DoS caused by a race condition when removing a root bus without holding the required lock. A local user with administrative privileges can exploit this issue by triggering...

curl: curl: SSH host verification bypass when using schemeless URLs with SFTP/SCP

A flaw was found in curl. When a user invokes curl with a schemeless URL and specifies SFTP SSH File Transfer Protocol or SCP Secure Copy Protocol as the default protocol, the tool layer fails to initialize critical SSH security options. This bypasses host verification, allowing curl to connect t...

poc-cve-2024-0132

poc-cve-2024-0132 再現環境: os: nvidiaドライバーを搭載したubuntu 22.04 docker: v27.1.0 nvidia-container-toolkit: v1.16.1 再現手順: pocコンテナイメージを実行する 目標: コンテナ内でホストのファイルにアクセスする コンテナ内のdocker.sockを介してdockerデーモンのAPIを呼び出す 再現 ビルド済みのpocイメージ ssst0n3/poc-cve-2024-0132 を使用するか、自分でソースからビルドしてください。 root@wanglei-gpu3: git clone...

Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in Apache Thrift

Summary Multiple vulnerabilities were addressed in IBM DataPower Gateway versions 11.0.0.3 and 10.6.0.11 Vulnerability Details CVEID:CVE-2026-55968 DESCRIPTION: Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Node.js bindings...

CVE-2023-24078

Description This script is a Proof of Concept PoC exploit I developed for CVE-2023-24078. After trying the publicly available PoCs that were not functional and facing frustration in trying to troubleshoot them, I just created my own script. Usage usage: python3 CVE-2023-24078.py -h -lh LHOST -lp...

CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

DEBIAN-CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

DEBIAN-CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85526

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

UBUNTU-CVE-2026-85526

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-87799

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

UBUNTU-CVE-2026-85185

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-87799 Arbitrary file write on LXD host via symlink in migration stream

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

EUVD-2026-88260

Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client that can create instances or custom storage volumes in a project, or a malicious migration source server, to write...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...

CVE-2026-85185 Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...