13002 matches found
USN-8864-1 linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system NFS server daemon; - IPv6 networking; - Netfilter; CVE-2025-38724, CVE-2026-53131, CVE-2026-532...
CVE-2024-38063-Exploit-Refactoring
CVE-2024-38063 ΠΠΊΡΠΏΠ»ΠΎΠΉΡ ΠΡΠΎΠ΄Π²ΠΈΠ½ΡΡΡΠΉ ΠΈΠ½ΡΡΡΡΠΌΠ΅Π½Ρ Π΄Π»Ρ ΡΠΊΡΠΏΠ»ΡΠ°ΡΠ°ΡΠΈΠΈ Ρ ΡΠΎΡΠ½ΠΎΠΉ ΠΎΠ±ΡΠ°Π±ΠΎΡΠΊΠΎΠΉ ΠΎΡΠΈΠ±ΠΎΠΊ ΠΈ Π²ΡΠΏΠΎΠ»Π½Π΅Π½ΠΈΠ΅ΠΌ, ΡΠΎΠ²ΠΌΠ΅ΡΡΠΈΠΌΡΠΌ Ρ DO-176C. ΠΠ±Π·ΠΎΡ ΠΡΠΎ ΡΠΏΠ΅ΡΠΈΠ°Π»ΠΈΠ·ΠΈΡΠΎΠ²Π°Π½Π½ΡΠΉ ΠΈΠ½ΡΡΡΡΠΌΠ΅Π½Ρ ΠΎΡΠ΅Π½ΠΊΠΈ Π±Π΅Π·ΠΎΠΏΠ°ΡΠ½ΠΎΡΡΠΈ Π΄Π»Ρ ΠΏΡΠΎΠ²Π΅ΡΠΊΠΈ ΡΠΌΡΠ³ΡΠ΅Π½ΠΈΡ ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΠΈ Windows IPv6 Π½Π° ΡΠ΅Π»Π΅Π²ΡΡ ΡΠΈΡΡΠ΅ΠΌΠ°Ρ . ΠΠΊΠ»ΡΡΠ°Π΅Ρ Π°Π²ΡΠΎΠΌΠ°ΡΠΈΡΠ΅ΡΠΊΠΎΠ΅ ΠΎΠ±Π½Π°ΡΡΠΆΠ΅Π½ΠΈΠ΅...
CVE-2021-24086
CVE-2021-24086 ΠΡΠΎ Π΄ΠΎΠΊΠ°Π·Π°ΡΠ΅Π»ΡΡΡΠ²ΠΎ ΠΊΠΎΠ½ΡΠ΅ΠΏΡΠΈΠΈ Π΄Π»Ρ CVE-2021-24086 Β«Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΡΠΈΠΏΠ° Β«ΠΡΠΊΠ°Π· Π² ΠΎΠ±ΡΠ»ΡΠΆΠΈΠ²Π°Π½ΠΈΠΈΒ» Π² Windows TCP/IPΒ», ΡΠ°Π·ΡΠΌΠ΅Π½ΠΎΠ²Π°Π½ΠΈΠ΅ NULL Π² tcpip.sys, ΠΈΡΠΏΡΠ°Π²Π»Π΅Π½Π½Π°Ρ Microsoft Π² ΡΠ΅Π²ΡΠ°Π»Π΅ 2021 Π³ΠΎΠ΄Π°. Π‘ΠΎΠ³Π»Π°ΡΠ½ΠΎ ΡΡΠΎΠΌΡ ΡΠ²ΠΈΡΡ, ΡΡΠ·Π²ΠΈΠΌΠΎΡΡΡ Π±ΡΠ»Π° Π½Π°ΠΉΠ΄Π΅Π½Π° @piazzt. ΠΠ½Π° ΠΌΠΎΠΆΠ΅Ρ Π±ΡΡΡ ΡΠ΄Π°Π»ΡΠ½Π½ΠΎ Π²ΡΠ·Π²Π°Π½Π° ΠΎΡΠΏΡΠ°Π²ΠΊΠΎΠΉ...
RHEL 10 : kpatch-patch-6_12_0-211_16_1 and kpatch-patch-6_12_0-211_49_1 (RHSA-2026:72831)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:72831 advisory. This is a kernel live patch module which can be loaded by the kpatch command line utility to modify the code of a running kernel. This pat...
Ubuntu 14.04 LTS / 16.04 LTS : Linux kernel vulnerabilities (USN-8864-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8864-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...
GO-2026-6572 Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers (NAT64, IPv4-compatible, 6to4) reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudreve
Cloudreve: SSRF guard bypass: checkIP does not decode IPv6-transition wrappers NAT64, IPv4-compatible, 6to4 reaching internal and cloud-metadata addresses in github.com/cloudreve/Cloudreve...
CVE-2026-55232
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A record passes a private-range check. Editor oEmbed...
ip-https-tools
ip-https-tools Microsoft DirectAccessμμ μ¬μ©νλ IP over HTTPS IP-HTTPS ν°λλ§ νλ‘ν μ½μ μν λꡬ λͺ¨μμΌλ‘, Teredo κ΄λ ¨ IPv6 ν¨ν·μ IPv4 κΈ°λ° HTTPS μΈμ μ ν΅ν΄ μ μ‘ν©λλ€. MS-IPHTTPS νλ‘ν μ½ μ¬μ DirectAccess κΈ°μ κ°μ DirectAccess μꡬ μ¬ν DirectAccess λ°°ν¬ κ°μ΄λ ip-https-discover.nse μ§μ λ νΈμ€νΈκ° IP-HTTPSλ₯Ό μ§μνλμ§ νμΈνλ Nmapμ© NSE μ€ν¬λ¦½νΈμ λλ€. μν μΆλ ₯:...
CVE-2024-38063-Remediation
CVE-2024-38063-ΠΡΠΏΡΠ°Π²Π»Π΅Π½ΠΈΠ΅ Π‘ΡΠ΅Π½Π°ΡΠΈΠΉ Π°ΡΠ΄ΠΈΡΠ° Π‘ΠΊΠ°ΡΠ°ΡΡ ΡΠΊΡΠΈΠΏΡ Ρ ΠΏΠΎΠΌΠΎΡΡΡ ΠΎΠ΄Π½ΠΎΡΡΡΠΎΡΠ½ΠΎΠΉ ΠΊΠΎΠΌΠ°Π½Π΄Ρ PowerShell $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1';...
CVE-2026-55232
The Vvveb CMS is vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) prior to version 1.0.8.6 . The root cause is an incomplete SSRF guard that uses an IPv4-only function , failing to inspect IPv6 addresses. Consequently, hosts lacking an A record bypass the private-range check. An authe...
CVE-2026-55232 Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A record passes a private-range check. Editor oEmbed...
CVE-2026-55232 Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A record passes a private-range check. Editor oEmbed...
CVE-2026-55232 Vvveb: Server-side request forgery in Vvveb via IPv6 bypass of validateUrl() in editor oEmbed proxy
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, Vvveb's SSRF guard resolves a host with an IPv4-only function and never inspects IPv6, so any host that lacks an A record passes a private-range check. Editor oEmbed...
CVE-2026-26988-LibreNMS-SQLi
CVE-2026-26988 β LibreNMS μΈμ¦λμ§ μμ SQL μΈμ μ PoC μΈμ¦λμ§ μμ SQL μΈμ μ μ΄ LibreNMS ajaxtable.phpμ IPv6 μ£Όμ κ²μ 맀κ°λ³μλ₯Ό ν΅ν΄ λ°μν©λλ€. μν₯λ°λ λ²μ : LibreNMS β€ 25.12.0 μμ λ λ²μ : LibreNMS β₯ 26.1 μ»€λ° 15429580baba03ed1dd377bada1bde4b7a1175a1 CVSS v4.0 : 9.3 Critical CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N CWE : CWE-...
CVE-2026-102294
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...
CVE-2026-33827
π΄ CVE-2026-33827: Windows TCP/IP μ격 μ½λ μ€ν RCE π κ°μ CVE-2026-33827 μ Windows TCP/IP λ€νΈμν¬ μ€νμ μν₯μ λ―ΈμΉλ μΉλͺ μ μΈ μ격 μ½λ μ€νRCE μ·¨μ½μ μ λλ€. λ€νΈμν¬ μ²λ¦¬ μ€ κ³΅μ 리μμ€ μ²λ¦¬ μ μλͺ»λ λκΈ°νλ‘ μΈν κ²½μ 쑰건Race Condition κ²°ν¨μΌλ‘ λΆλ₯λ©λλ€. μΈμ¦λμ§ μμ 곡격μλ IPSecμ΄ νμ±νλ Windows λ Έλμ νΉμνκ² μ μλ IPv6 ν¨ν·μ μ μ‘νμ¬ μ΄ μ·¨μ½μ μ μ μ©ν μ μμΌλ©°, μ¬μ©μ μνΈ μμ© μμ΄ μμ€ν κΆν μΌλ‘ μμ μ½λ...
CVE-2026-102294 Authenticated OS Command Injection in TL-WR841N IPv6 WAN Configuration
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...
EUVD-2026-90974
TP-Link TL-WR841N contains an authenticated OS command injection vulnerability in the IPv6 WAN configuration. A crafted IPv6 Gateway value is improperly incorporated into a system command, allowing an authenticated administrator to execute arbitrary operating system commands. Successful...
CVE-2026-102294
The TP-Link TL-WR841N router is susceptible to an authenticated OS command injection vulnerability within the IPv6 WAN configuration . The root cause is the improper incorporation of a crafted IPv6 Gateway value into a system command. This allows an authenticated administrator to execute arbitrar...
lightrag-hku: SSRF via IPv6-transition address bypass (NAT64, IPv4-compatible, 6to4) of the native-markdown image-download guard
SummaryLightRAG's native markdown parser downloads external images referenced by an uploaded markdown or textpack document. The only SSRF guard, validatedaddresses in lightrag/parser/markdown/parser.py, resolves the image host and rejects it when the resolved IP is not isglobal. That check is...