270 matches found
BadParcel
BadParcel Voir Bundle Fengshui pour une analyse approfondie de cette classe de bugs. Ce dépôt contient une PoC pour CVE-2023-20963, qui est une incohérence dans la logique de sérialisation/désérialisation de WorkSource sur Android. La vulnérabilité est corrigée dans le Bulletin de sécurité Androi...
tscopy
TScopy آخر تحديث 2022-03-31 تقديم TScopy من المتطلبات أثناء التعامل مع حادث أمني Incident Response - IR القدرة على تحليل الملفات الموجودة في نظام الملفات. أحيانًا تكون هذه الملفات مقفلة من قبل نظام التشغيل OS لأنها قيد الاستخدام، وهذا مزعج بشكل خاص مع سجلات الأحداث وخلايا التسجيل. تتيح TScopy...
CVE-2026-0092
CVE-2026-0092 Dans Package Manager, un contournement du contrôleur de verrouillage de l'appareil est possible en raison d'un contrôle des autorisations manquant. Cela pourrait entraîner une élévation locale de privilèges sans nécessiter de privilèges d'exécution supplémentaires. Aucune interactio...
Linux Distros Unpatched Vulnerability : CVE-2026-90176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == e...
DEBIAN-CVE-2026-90176
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
CVE-2026-90176 ksmbd: Do not skip lock checks for single-byte ranges
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do not skip lock checks for single-byte ranges checklockrange uses inclusive ranges. Its callers pass the end offset as start + length - 1, so start == end represents a valid single-byte range rather than an empty range. T...
CVE-2022-46638
CVE-2022-46638 О уязвимости в AppLock Ver.5.6.2, популярном Android-приложении, которому доверяют более 100 миллионов пользователей в более чем 150 странах. PoC Разблокируйте приложение, защищенное AppLock, просто многократно нажимая кнопку «Назад». 1. Откройте приложение, которое было...
CVE-2026-88770
Keycloak 's Device Authorization Grant flow contains a flaw where the token redemption process does not verify whether a user account is currently locked due to brute-force protection . An attacker holding an active session for a locked account can complete the device login flow and obtain new se...
CVE-2026-88770
A flaw was found in the Device Authorization Grant flow of Keycloak, an identity and access management solution. The issue occurs because the token redemption process fails to check if a user account is currently locked due to brute-force protection. If an attacker has an active session for a...
CVE-2026-78103
WatchGuard Dimension (Log Server) is affected by a configuration lock bypass in its server-side configuration endpoint. The product provides a client-side lock/unlock UI control for management changes, but the server-side endpoint does not enforce this workflow state. As a result, an authenticate...
CVE-2026-78103 Dimension Log Server Configuration Lock Bypass Vulnerability
WatchGuard Dimension provides a client-side lock/unlock UI control for management changes. The server-side configuration endpoint does not enforce this lock/unlock workflow state, allowing an authenticated administrator to submit configuration changes directly to the endpoint without first...
PT-2026-72683
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the RDMA/bnxt re component where applications can request multiple Work Completion WC pages for the same ucontext, although only one WC page per ucontext is supported...
CVE-2026-73627
A flaw was found in JupyterLab. An authenticated user can bypass administrator lock rules in the plugin manager by making direct requests to the /lab/api/plugins endpoint. This allows them to enable or disable plugins that were locked, including child plugins and those locked via the 'lock all'...
UBUNTU-CVE-2026-73627
JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...
CVE-2026-73627
JupyterLab pip package 'jupyterlab' versions =4.1.0,=4.6.0,=4.6.1 contain a plugin manager lock-rule enforcement bypass. Two server-side enforcement gaps allow an authenticated user to circumvent administrator lock rules by making direct requests to the /lab/api/plugins endpoint, enabling or...
CVE-2026-73288 RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...
CVE-2026-73288 RustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/objectlock/objectlocksys.rs lets checkobjectlockfordeletion, deleteprefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable .metadata.bin...
PT-2026-71091
RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-rc.1, RustFS Object Lock enforcement in crates/ecstore/src/bucket/object lock/objectlock sys.rs lets check object lock for deletion, delete prefix, and lifecycle and scanner sweeps treat ConfigNotFound, unreadable...
