CVE-2026-101044 pacquet before 12.0.0-alpha.5 Path Traversal via lockfile alias

pacquet, the Rust package-manager component shipped in the pnpm npm package versions =12.0.0-alpha.0 and 12.0.0-alpha.5, does not validate dependency alias/name paths taken from a lockfile before using them in install-time filesystem joins. When a user installs a project with an attacker-supplied...

CVE-2026-82329

CVE-2026-82329 — JFrog Artifactory 未認証認証バイパス（大量悪用ツール） -red.svg 重大な認証バイパス（CVSS 9.8）— 実環境で活発に悪用中 このツールは、CVE-2026-82329 の大量悪用ツール です。この脆弱性により、ネットワークアクセスを持つ未認証の攻撃者 が、セルフホスト型 JFrog Artifactory インスタンスで完全な管理者権限 を取得できます。単一ターゲットおよびマルチスレッドによるバッチスキャンをサポートしています。 ⚠️ 脆弱性の概要 プロパティ| 値 ---|--- CVE ID| CVE-2026-8232...

CVE-2026-23005-Matter-Commissioning-Code-Brute-Force-Without-Rate-Limit

CVE-2026-23005 – レート制限なし Matter コミッショニングコード ブルートフォース プログラムコード（Python Matter シミュレーション） root@kitploit: mattercommissioningsim.py import random realcode = random.randint10000000, 99999999 def attemptjoincodeattempt: Simulate joining: no delay, no lockout if codeattempt == realcode: print"Joined...

CVE-2025-46171

vBulletin 3.x.x - バディリスト過負荷によるDoS 概要 /misc.php?do=buddylist エンドポイントは、すべてのバディとそのユーザー情報およびセッション情報を取得してオンラインステータスを確認するための、単一で大規模なJOINクエリを実行します。このクエリはページネーションや結果制限なしにバディリスト全体を処理するため、バディリストが大きくなると非常にリソースを消費し、データベースに過負荷をかける可能性があります。...

Malicious code in prosocks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2bf0fd5f445eed9825601f2b4497502054176d106d4fecb9eabf38312dd582 prosocks 1.0.25 enrolls the installer's host as a remote-controlled SOCKS5 exit node under a hardcoded control plane at https://kalnetz.store...

CVE-2026-82329-JFrog-Artifactory-Auth-Bypass

artifactory.py root@kitploit: ╔══════════════════════════════════════════════════════════╗ ║ artifactory · CVE-2026-82329 unauth admin takeover ║ ║ mitsec · https://x.com/ynsmroztas ║ ╚══════════════════════════════════════════════════════════╝ CVE-2026-82329 — JFrog Artifactory（セルフホスト版）の認証不要...

cve-2026-82329-jfrog-artifactory

CVE-2026-82329 — JFrog Artifactory 未認証の認証バイパス → 管理者乗っ取り CVSS 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · CWE-287 · 2026-08-28 公開 · 実環境で悪用済み。 未認証のネットワーク隣接攻撃者が、デフォルト設定のセルフホスト型 JFrog Artifactory に対してプラットフォーム管理者アクセストークン を発行できます。このディレクトリには、再現可能な Docker ラボと、URL パラメータ化された検証用 PoC が含まれています。 artifactory-oss...

EUVD-2026-84005

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join...

CVE-2026-82329-PoC-Exploit

CVE‑2026‑82329 – JFrog Artifactory 認証バイパスツールキット 倫理的な使用のみ – 許可されたセキュリティテスト このリポジトリは、許可されたセキュリティ専門家、ブルーチーム、ペネトレーションテスター のみにツールを提供します。 コンピュータシステムへの不正アクセスは、CFAA（米国）、Computer Misuse Act（英国）、TCK 243/244（トルコ）、および世界中の同様の法律 の下で違法です。 📖 脆弱性の概要 CVE‑2026‑82329 は、セルフホスト型 JFrog Artifactory （バージョン 7.111.x から...

Exploit for Improper Authentication in Jfrog Artifactory

CVE‑2026‑82329 – JFrog Artifactory Auth B...

CVE-2026-91181

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2026-91181 Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

CVE-2026-91181 Data Retention Teams Endpoint Leaks Private Team Invite ID

Mattermost versions 11.9.x = 11.9.0, 11.8.x = 11.8.4, 11.7.x = 11.7.7, 10.11.x = 10.11.22 Fail to sanitize Team objects returned by the data retention teams endpoint which allows an authenticated user holding only the read-only Data Retention Policy permission to obtain a private team's secret...

Astra Linux – Vulnerability in firejail

A privilege context switching issue was discovered in the join.c file of Firejail 0.9.68. By creating a fake Firejail container that is accepted by the Firejail setuid-root program as a join target, a local attacker can enter an environment where the Linux user namespace remains the initial user...

Astra Linux – Vulnerability in SQLite3

The flattenSubquery in select.c in SQLite 3.30.1 mishandles certain uses of SELECT DISTINCT involving a LEFT JOIN where the right-hand side is a view. This can lead to a NULL pointer dereference or incorrect results...

Astra Linux – Vulnerability in Corosync

A flaw was discovered in Corosync. There is an integer overflow vulnerability in Corosync’s join message sanity validation mechanism, which allows a remote, unauthenticated attacker to send crafted User Datagram Protocol UDP packets. This can cause the service to crash, resulting in a denial of...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: drivers: staging: rtl8723bs: Fixed locking issues in rtwjointimeouthandler. The commit number 041879b12ddb states: “drivers: staging: rtl8192bs: Fixed deadlock in rtwjoinbsseventprehandle. In addition, rtwjointimeouthandler wa...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: net: Marvell: Prestera: Fixed an issue where double-free operations occurred on the error path. Fixed error path handling in presterabridgeportjoin, which could cause the Prestera driver to crash see below. Trace: - Internal...

Astra Linux – Vulnerability in Ruby 2.5

URI is a module that provides classes for handling Uniform Resource Identifiers. In versions 0.12.4 and earlier bundled with Ruby 3.2 series, 0.13.2 and earlier bundled with Ruby 3.3 series, 1.0.3 and earlier bundled with Ruby 3.4 series, when using the + operator to combine URIs, sensitive...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: For mptcp: pm: only decrement addaddraccepted for MPJ requests. The following warning has been added: WARNONONCEmsk-pm.addaddraccepted == 0 … Adding this warning before decrementing the addaddraccepted counter helped to identify ...