1626 matches found
CVE-2023-4696
CVE-2023-4696 memos v0.13.2 における JWT トークンの不適切な処理によるアカウント乗っ取り 説明 私は最近、usememos/memos システムにおいて重大なセキュリティ脆弱性を発見しました。この脆弱性により、任意のユーザーが他のユーザーのデータ（パスワードを含む）を比較的容易に変更できる可能性があります。この欠陥を悪用することで、攻撃者は機密情報への不正アクセスを取得し、多くのセキュリティおよびプライバシー上の懸念を引き起こす可能性があります。この発見の詳細を見ていきましょう。 この脆弱性の核心は、安全なデータ交換に一般的に使用されるメカニズムである...
CVE-2026-43499
CVE-2026-43499 利用说明 严重性： 高 CVSS： 7.8 影响： 机密性、完整性、可用性 发布时间： 2026-05-21 技术摘要 CVE-2026-43499 是 Linux 内核中的一个漏洞，具体影响负责管理实时互斥锁的 rtmutex 组件。该漏洞源于实时锁队列操作期间对等待任务的不当处理，其中 removewaiter 函数使用了当前任务而非预期的等待任务。CVE-2026-43499 是 Linux 内核中的一个漏洞，具体影响负责管理实时互斥锁的 rtmutex 组件。该漏洞源于实时锁队列操作期间对等待任务的不当处理，其中 removewaiter...
CVE-2025-6713
CVE-2025-6713 构造聚合管道，以在未经适当授权的情况下访问数据 —— 由于 MongoDB v8.0 且 v7.0 且 v6.0 且 6.0.22 中对 $mergeCursors 的处理不当所致 安装 不难 —— 直接用 pip3 安装依赖即可：pip install -r requirements 用法 root@kitploit: python3 CVE-2025-6713 自行试验 在自己环境上测试需要做什么 1. 第 4、5、6、7、9、10 行： root@kitploit: mconnect = "mongodb://localhost:27017" dbnam...
EUVD-2026-75873
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline...
CVE-2026-71640
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline...
CVE-2026-71640
An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567abc0e240396cb42 allows unsafe vehicle motion via improper handling of expired trajectory data in the replanning pipeline...
CVE-2026-71640
ZJU-FAST-Lab EGO-Planner-v2 , a vehicle motion planning library, is affected in all versions up to commit 5c99a958 . The root cause is improper handling of expired trajectory data in the replanning pipeline , which can result in unsafe vehicle motion . The vulnerability is rated CVSS 9.1 (Critica...
UBUNTU-CVE-2026-82067
Improper handling of case sensitivity in the configuration validation...
CVE-2026-82067
Improper handling of case sensitivity in the configuration validation...
CVE-2025-8110
CVE-2025-8110 Gogs の PutContents API における不適切なシンボリックリンク処理により、ローカルコード実行が可能です。 この検出方法はどのように動作しますか？ /user/login のフッターから正規表現 Gogs Version: X.X.X で Gogs バージョンを抽出し、バージョン 0.13.3 以前を実行しているインスタンスを CVE-2025-8110 の脆弱性ありとしてフラグ付けします。 このスクリプトを実行するには？...
Stream Corruption
Spring Framework is vulnerable to stream corruption. The vulnerability is due to improper handling of response streams when processing SSE with view fragments, which allows an attacker to potentially corrupt or disrupt the application’s HTTP response stream...
The vulnerability of the adjust_reg_min_max_vals() function in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the adjustregminmaxvals function in the kernel/bpf/verifier.c module of the Linux operating system is related to improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
The vulnerability of the functions check_ld_abs() and visit_insn() in the kernel/bpf/verifier.c module of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the functions checkldabs and visitinsn in the kernel/bpf/verifier.c module of the Linux operating system’s kernel relates to the improper handling of an additional special element. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
EUVD-2026-70507
Improper handling of an unexpected value size in the decryption path of a client-side encryption library can cause a failed internal check that terminates the process using the library. A party able to place a suitably formed encrypted value where an application will decrypt it, or able to contro...
CVE-2026-20280
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...
CVE-2026-20280 Cisco IOS XR Software Security Hardening Release: September 2026
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening releases that address multiple internally discovered vulnerabilities. Th...
CVE-2026-73476
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...
CVE-2026-73476 External Authentication - Moderately critical - Access bypass - SA-CONTRIB-2026-098
Improper Handling of Case Sensitivity vulnerability in Drupal External Authentication allows Privilege Escalation. This issue affects External Authentication versions: from 0.0.0 to 2.0.13...