firehol

FireHOL http://firehol.org/ FireHOL, an iptables stateful packet filtering firewall for humans! FireQOS, a TC based bandwidth shaper for humans! Git These instructions are for people who are working with the git repository. There are more general instructions starting with Upgrade Notes. Cloning...

CVE-2024-3105-PoC

CVE-2024-3105 PoC Le plugin WordPress Woody code snippets – Insert Header Footer Code, AdSense Ads est vulnérable à l'exécution de code à distance dans toutes les versions jusqu'à la 2.5.0 incluse, via le shortcode 'insertphp'. Cela est dû au fait que le plugin ne restreint pas l'utilisation de...

By-Poloss..-..CVE-2017-20251

CVE-2017-20251: Внедрение PHP-кода в плагин Insert PHP Название уязвимости Неаутентифицированное внедрение PHP-кода через обработку шорткодов в плагине Insert PHP Основная информация Поле| Значение ---|--- CVE ID| CVE-2017-20251 Плагин| Insert PHP ныне Woody Code Snippets Затронутые версии| 3.3.1...

CVE-2023-42426

ID CVE : CVE-2023-42426 Type de vulnérabilité : Cross-Site Scripting Description : Une vulnérabilité de type Cross-Site Scripting XSS dans Froala Froala Editor v.4.1.1 permet à des attaquants distants d'exécuter du code arbitraire via le paramètre « Insert link » dans le composant « Insert Image ...

CVE-2025-51820

CVE-2025-51820 Une vulnérabilité critique d'exécution de code à distance RCE CVE-2025-51820 a été découverte dans Shopping Portal v1.0. 🚨 Exécution de code à distance dans Online Shopping Portal Project v1.0 CVE-2025-51820 🔍 Introduction Dans le monde numérique d'aujourd'hui, l'exécution de code ...

CVE-2026-100623: Incorrect Authorization

Capgo capgo.app exposes the legacy membership table public.orgusers directly through Supabase PostgREST. The table's row-level security policies "Allow org admin to insert" and "Allow org admin to update" only verify that the caller has admin rights in the target organization...

SUSE CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

DEBIAN-CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

UBUNTU-CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-98127

In the Linux kernel, the following vulnerability has been resolved: smb/client: validate new EOF for insert range smb3insertrange does not check if the new file size isize + len is valid. This allows FALLOCFLINSERTRANGE to bypass RLIMITFSIZE, exceed smaxbytes, or produce a size outside the lofft...

CVE-2026-98125

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-98125 smb/client: fix stale page cache in insert/collapse range

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

EUVD-2026-86956

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

CVE-2026-98125

The Linux kernel contains a vulnerability in the smb/client component where smb3_insert_range() and smb3_collapse_range() may return stale data . The issue occurs because truncate_pagecache_range() only partially zeroes boundary pages when the offset or old EOF is not page-aligned , leaving them ...

EUVD-2026-86861

In the Linux kernel, the following vulnerability has been resolved: xfs: lock the healthmon when inserting unmount event LOLLM complains that xfshealthmonunmount does an unlocked insert of the unmount event into the health monitor's event list. Fix that...

Linux Distros Unpatched Vulnerability : CVE-2026-97553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: lock the healthmon when inserting unmount event LOLLM complains that xfshealthmonunmount does an unlocked insert of the unmount event into the health...

CVE-2026-98125: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache. However, if off or oldeof is not page-aligned, the boundary pages a...

Linux Distros Unpatched Vulnerability : CVE-2026-98125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb/client: fix stale page cache in insert/collapse range smb3insertrange and smb3collapserange use truncatepagecacherange to invalidate the affected page cache...

EUVD-2026-86289

phpMyFAQ is an open source FAQ web application. The StopWords::add method inversions prior to 4.1.6 builds a SQL INSERT statement using sprintf and inserts the user-supplied stop word value directly into the query string without calling the application's database escaping function on it. A siblin...

PT-2026-97893

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.0-rc7 Description A data race exists in the IPv6 implementation of the Linux kernel. The function rt6 nh dump exceptions uses hlist for each entry to iterate over RCU-protected exception lists while holding r...