CVE-2026-68767

A flaw was found in hashcat. The fgetl function in src/filehandling.c incorrectly writes a null terminator one byte beyond the allocated buffer when processing an input line that exactly matches the buffer's length. A local attacker can exploit this out-of-bounds heap write by providing a special...

CVE-2026-68519

A flaw was found in Glances. This issue occurs because the --disable-config-exec option does not properly prevent on-alert action commands from executing shell operators. A local attacker with high privileges could exploit this to execute arbitrary commands, leading to high impact on...

CVE-2023-43353-CMSmadesimple-Stored-XSS---News---Extra

CMSmadesimple Stored XSS v2.2.18 लेखक: सर्जियो विवरण: CMSmadesimple v.2.2.18 में क्रॉस-साइट स्क्रिप्टिंग भेद्यता एक स्थानीय हमलावर को Content - News Menu के Extra में क्राफ्टेड स्क्रिप्ट के माध्यम से मनमाना कोड निष्पादित करने की अनुमति देती है। हमले के वेक्टर: स्क्रिप्टिंग "Content - News Menu" क...

CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension

CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in CMSmadesimple v.2.2.18 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Top Directory im File-Picker-Menü auszuführen. Angriffsvektoren: Skripting. Eine...

CVE-2026-74714

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the bpfitertcpestablishedbatch function. This flaw occurs because the sockhold function is used on a requestsock object whose reference count can be zero, leading to an incorrect reference count. A local attacker can...

CVE-2023-43343-Quick-CMS-Stored-XSS---Pages-Files

Quick CMS Stored XSS v6.7 Autor: Sergio Beschreibung: Mehrere Cross-Site-Scripting-Schwachstellen XSS in Quick CMS v6.7 ermöglichen es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript an die Beschreibung der Dateien Files – Description im Seitenmenü Pages Menu auszuführen...

Astra Linux – Vulnerability in ffmpeg, ffmpeg5

A buffer overflow vulnerability exists in Ffmpeg v.n6.1-3-g466799d4f5, allowing a local attacker to execute arbitrary code through the ffbwdiffilterintrac function in the libavfilter/bwdifdsp.c:125:5 component...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before version 5.14.6. Local attackers who had access to the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileged operations, denoted as...

Astra Linux – Vulnerability in libmodule-scandeps-perl

Qualys discovered that if unsanitized input was used with the Modules::ScanDeps library, before version 1.36, a local attacker could potentially execute arbitrary shell commands by opening a “pesky pipe” e.g., passing “commands|” as a filename or by passing arbitrary strings to the eval function...

Astra Linux – Vulnerability in Linux

A flaw was discovered in the JFS filesystem code within the Linux kernel, which allows a local attacker to cause the system to panic by enabling the ability to set extended attributes. This can lead to memory corruption or an escalation of privileges. The most significant threat posed by this...

Astra Linux – Vulnerability in ffmpeg5

The Ffmpeg v.N113007-g8d24a28d06 contains a buffer overflow vulnerability that allows a local attacker to execute arbitrary code through libavutil/imgutils.c:353:9 in the imagecopyplane function...

CVE-2026-74712

A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...

CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-

Evolution CMS XSS Riflesso v3.2.3 Autore: Sergio Descrizione: Una vulnerabilità di cross-site scripting XSS riflesso nel processo di connessione dell'installazione di Evolution v.3.2.3 consente a un attaccante locale di eseguire script web arbitrari tramite un payload appositamente creato inietta...

CVE-2026-74584

A flaw was found in the Linux kernel's RDMA/bnxtre component. A local attacker with access to the RDMA device could exploit this vulnerability due to a failure to zero out a shared memory page before exposing it to userspace. This could lead to information disclosure, allowing the attacker to rea...

CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager

CMSmadesimple XSS Memorizzato v2.2.18 Autore: Sergio Descrizione: Molteplici vulnerabilità cross-site scripting XSS in CMSmadesimple v.2.2.18 consentono a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script appositamente predisposto nei dati Page Specific Metadata e...

CVE-2023-44764_ConcreteCMS-Stored-XSS---Site_Installation

ConcreteCMS XSS Memorizzato v.9.2.1 Author: Sergio Descrizione: La vulnerabilità di Cross Site Scripting in ConcreteCMS v.9.2.1 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente predisposto nel parametro SITE durante l'installazione o nelle Impostazion...

CVE-2023-43874-e107-CMS-Stored-XSS---MetaCustomTags

e107 CMS Stored XSS v2.3.2 Autore: Sergio Descrizione: La vulnerabilità di Cross Site Scripting XSS multiplo in e017 CMS v.2.3.2 consente a un attaccante locale di eseguire codice arbitrario tramite uno script appositamente creato nei campi Copyright e Author nel menu Meta & Custom Tags. Vettori ...

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Descrição: Vulnerabilidade de Cross Site Scripting no CMSmadesimple v.2.2.18 permite que um atacante local execute código arbitrário por meio de um script elaborado no campo Title em My Preferences - Manage Shortcuts Vetores de Ataque: Scripting Uma...

CVE-2026-70383

A flaw was found in the DigiDoc4 client. This vulnerability, categorized as an Improper Limitation of a Pathname to a Restricted Directory Path Traversal, allows a local attacker to write files to arbitrary locations on the system with active user interaction. By exploiting this flaw, an attacker...

AZL-97194 CVE-2026-74724 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: ipvs: avoid out-of-bounds write in ipvsnaticmp Sashiko warns that local attacker can modify the packet while it is processed by IPVS. Some places read the IP ihl field multiple times which can cause out-of-bounds access. One such...