11522 matches found
CVE-2026-19634
PostgreSQL Anonymizer is vulnerable to SQL injection in the anon.import_database_rules() and anon.import_roles_rules() functions. A user can craft a malicious JSON document with specially crafted object names; when a superuser subsequently calls one of these import functions, the injected code ex...
CVE-2022-35650
CVE-2022-35650 This is an arbitrary file read in Moodle. Prereqs You must have compromised a teacher or admin level user. Steps 1. Clone this repo: root@kitploit: git clone https://github.com/Gr4y-r0se/CVE-2022-35650.git 2. Run this command to zip the exploit up root@kitploit: zip exploit.zip...
AZL-99684 CVE-2026-80888 affecting package kernel 6.6.150.1-1
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...
CVE-2026-80888
This Linux kernel vulnerability affects the drm/vmwgfx paravirtualized graphics driver. The function ttm_prime_fd_to_handle() returns -ENOSYS when an imported fd's dma_buf->ops do not match the ttm_object_device's ops, but fails to release the reference previously acquired by dma_buf_get(). As...
EUVD-2026-71638
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...
CVE-2026-80888
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...
CVE-2026-80888 drm/vmwgfx: drop dma_buf reference on foreign-fd prime import
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the ttmobjectdevice's ops, but does so without releasing the reference acquired by...
Malicious code in olympuslib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcee7d29dcf5e9c04cc3528403c15c3359c6701eaf42f54ecaa2ac4c29a4b3c Top-level init.py invokes a canary routine on import that serializes the entire os.environ dictionary along with socket.gethostname and package...
MAL-2026-15928 Malicious code in olympuslib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fdcee7d29dcf5e9c04cc3528403c15c3359c6701eaf42f54ecaa2ac4c29a4b3c Top-level init.py invokes a canary routine on import that serializes the entire os.environ dictionary along with socket.gethostname and package...
MAL-2026-15929 Malicious code in pymaas (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d07b21485fb1007b5cca6c07b48620d235200b19dd62e8d6018d019ec5557dc On import pymaas, top-level code in the package invokes a canary function that collects the entire os.environ dictionary and socket.gethostname,...
CVE-2026-71197
A flaw was found in OpenStack Glance. The web-download image import method can bypass host-based blocklist filtering. When an operator configures disallowedhosts with IP addresses to block access to internal services, an attacker can circumvent this protection by using a hostname that resolves to...
CVE-2026-71196
A server-side request forgery SSRF vulnerability was found in OpenStack Glance. The web-download image import method allows authenticated users to provide a URI from which the Glance service fetches data. Due to insufficient default host filtering, an attacker with standard tenant credentials can...
The vulnerability of the xe_gem_prime_import() function in the drivers/gpu/drm/xe/xe_dma_buf.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the xegemprimeimport function in the drivers/gpu/drm/xe/xedmabuf.c module of the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibilit...
Linux Distros Unpatched Vulnerability : CVE-2026-80888
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/vmwgfx: drop dmabuf reference on foreign-fd prime import ttmprimefdtohandle returns -ENOSYS when the imported fd's dmabuf-ops do not match the...
EUVD-2026-57408
SiYuan: Second-order SSTI to arbitrary SQL via attribute-view template column queryBlocks: malicious imported package executes SQL on victim kernel...
Orval: Import-time RCE via schema default -> zod module-level template literal
Summary Orval's zod schema generation emits a schema's default value as a module-level template literal export const …Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression that is evaluated when the generated zod schema module is imported,...
Orval: Import-time RCE via array-items default -> zod module-level template literal
Summary Orval's zod schema generation emits the array-items default value as a module-level template literal export const …Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression evaluated when the generated zod schema module is imported,...
Orval: Import-time RCE via header-parameter default -> zod module-level template literal
Summary Orval's zod schema generation emits the header-parameter default value as a module-level template literal export const Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression evaluated when the generated zod schema module is imported,...
Orval: Import-time RCE via enum-typed default -> zod module-level template literal
Summary Orval's zod schema generation emits the enum-typed default value as a module-level template literal export const …Default = ; without escaping $ or the backtick. A default of the form v$w injects a live JavaScript expression evaluated when the generated zod schema module is imported,...
Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli
Summary orval's zod client emits each query parameter name as a double-quoted key in the generated zod.object... request-validation schema WITHOUT escaping the double quote. A " in the query parameter name closes the key and lands in object-literal context, where an injected computed property key...