ds3-nrssr-rce

アップデート: Dark Souls III 1.15.1 2022年8月25日、Dark Souls IIIの新たなゲームアップデート1.15.1が、オンラインサービスの復旧とともにリリースされました。このアップデートでは、CVE-2022-24125とCVE-2022-24126の両方が修正され...

CVE-2019-19393

Rittal CMC PU III – 保存型XSS PoC アプリケーション: Rittal CMC PU III Web管理 デバイス: CMC PU III 7030.000 ソフトウェアリビジョン: V3.11.002 から V3.15.704 まで ハードウェアリビジョン: V3.00 から V6.01 まで 攻撃タイプ: 保存型XSS 解決策: ソフトウェアリビジョン V3.17.10 以降にアップデート 概要:...

CVE-2025-63587

rittalvuln この脆弱性は確実に Rittal CMC III 7030.000（3.15.704）に関連しますが、他の製品にも関連する可能性があります。 脆弱性の本質: 正しいログインではレスポンスが login failed を返しますが、誤ったログインでは 'some error has occured...' というエラーが返ります。 正しいログイン 誤ったログイン...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sparc: Fixed inaccurate exception reporting in copyfromtouser for UltraSPARC III. Anthony Yznaga discovered that a bug in the ext4 code, where large amounts of data were allowed, resulted from copyfromuser returning impossibly...

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

CVE-2026-8917

CVE-2026-8917 — An untrusted pointer dereference via an IOCTL affects ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll . The vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. According to the provided ...

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

EUVD-2026-55926

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

CVE-2026-8917

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

CVE-2026-8917: Untrusted Pointer Dereference

Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation. Refer to the ' Security Update for ASUS GPU Tweak III, GPU...

PT-2026-70053

Name of the Vulnerable Software and Affected Versions ASUS GPU Tweak III affected versions not specified ASUS GPU Tweak II affected versions not specified ASUS AI Suite 3 affected versions not specified VGAdll affected versions not specified Description An untrusted pointer dereference exists...

CVE-2026-71250

Firefly III is reported vulnerable due to IsValidWebhookUrl.php: the validator explicitly allows any address in 127.0.0.0/8, enabling an authenticated user with webhooks enabled to configure a webhook targeting loopback services on the server. Furthermore, the validator resolves the target once v...

EUVD-2026-53323

Firefly III's webhook URL validator IsValidWebhookUrl.php filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved address in 127.0.0.0/8, permitting an authenticated user with webhooks enabled, which is off by default to configure a webhook targeti...

CVE-2026-71250 Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebinding

Firefly III's webhook URL validator IsValidWebhookUrl.php filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved address in 127.0.0.0/8, permitting an authenticated user with webhooks enabled, which is off by default to configure a webhook targeti...

CVE-2026-71250: Server-Side Request Forgery (SSRF)

Firefly III's webhook URL validator IsValidWebhookUrl.php filters most private/reserved IPv4 ranges but contains an explicit early-return that allows any resolved address in 127.0.0.0/8, permitting an authenticated user with webhooks enabled, which is off by default to configure a webhook targeti...

GHSA-9MMG-Q95P-GP67 Project Firefly III has incorrect access control in the webhook management component

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

Project Firefly III has incorrect access control in the webhook management component

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

Access Control Bypass

Overview grumpydictator/firefly-iii is a personal finances manager. Affected versions of this package are vulnerable to Access Control Bypass via the webhook management component. An attacker can access internal resources by sending a crafted POST request. Remediation There is no fixed version fo...

CVE-2026-50886

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...

CVE-2026-50886: Improper Access Control

Incorrect access control in the webhook management component of Project Firefly III v6.5.9 allows attackers to scan internal resources via a crafted POST request...