345619 matches found
CVE-2026-53611
Looking Glass is a stateless network-diagnostic platform (single Go binary) that fronts routers over SSH and exposes ping, traceroute, and BGP lookups via gRPC, a SvelteKit web UI, and a CLI. Prior to version 1.3.5 , an unanchored regular expression in the BGPASPath input validation layer allows ...
CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
Looking Glass is a modern, stateless network-diagnostic platform тАФ a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
Looking Glass is a modern, stateless network-diagnostic platform тАФ a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
CVE-2026-53611 Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
Looking Glass is a modern, stateless network-diagnostic platform тАФ a single self-contained Go binary that fronts a fleet of routers over SSH and exposes ping / traceroute / BGP lookups through a gRPC ConnectRPC API, an embedded SvelteKit web UI, and a lg-cli client. Prior to version 1.3.5, there ...
CVE-2026-9789
CVE ID: CVE-2026-9789 рд╢реЛрдзрдХрд░реНрддрд╛: Vo Duc Thang ugvxb рд╕реНрд╡реАрдХреГрддрд┐: https://community.acer.com/en/kb/articles/19670 рд╡реАрдбрд┐рдпреЛ POC: https://drive.google.com/file/d/1B8b42bE68CWMnlqG6eJWi0txGFsHAJZc/view?usp=sharing 1. рдХрд╛рд░реНрдпрдХрд╛рд░реА рд╕рд╛рд░рд╛рдВрд╢ рдПрд╕рд░ NitroSense рд╕реЙрдлрд╝реНрдЯрд╡реЗрдпрд░ PSAdminAgent.exe рдореЗрдВ рдПрдХ рдЧрдВрднреАрд░ рд╕реНрдерд╛рдиреАрдп...
edb-40564-mingw-fix
ms11-046-mingw CVE-2011-1249 / MS11-046 тАФ Windows x86 рдХреЗ рд▓рд┐рдП AFD.sys рд╡рд┐рд╢реЗрд╖рд╛рдзрд┐рдХрд╛рд░ рд╡реГрджреНрдзрд┐ред рдореВрд▓ рд╢реЛрд╖рдг Tomislav Paskalev EDB-40564 рджреНрд╡рд╛рд░рд╛ред рдпрд╣ рдлреЛрд░реНрдХ MinGW рдХреНрд░реЙрд╕-рдХрдВрдкрд╛рдЗрд▓реЗрд╢рди рддреНрд░реБрдЯрд┐рдпреЛрдВ рдХреЛ рдареАрдХ рдХрд░рддрд╛ рд╣реИ рдФрд░ argv1 рдХреЗ рдорд╛рдзреНрдпрдо рд╕реЗ рдХрд╕реНрдЯрдо рдХрдорд╛рдВрдб рдирд┐рд╖реНрдкрд╛рджрди рдЬреЛрдбрд╝рддрд╛ рд╣реИред рдореВрд▓ рд╕реЗ рдкрд░рд┐рд╡рд░реНрддрди | рдкрд░рд┐рд╡рд░реНрддрди| рдХрд╛рд░рдг ---|---|--- 1| FARPR...
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84675
CVE-2026-84675 is an OS command injection vulnerability in the Jenkins TICS Plugin , affecting versions 2025.1.1 and earlier . Attackers who can control build environment variable values can execute arbitrary commands on the agent running the build. The vulnerability has a CVSS 3.1 base score of ...
EUVD-2026-70148
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84675
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable values to execute arbitrary commands on the agent running the build...
CVE-2026-84657
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users...
CVE-2026-84657
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users...
EUVD-2026-70123
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the build CLI command does not check the Item/Cancel permission when using the -s flag to cancel a build triggered to wait for completion, allowing attackers with Item/Build permission to cancel builds started by other users...
CVE-2026-84657
In Jenkins 2.579 and earlier (LTS 2.568.2 and earlier), the build CLI command with the -s flag does not check the Item/Cancel permission when canceling a build after the CLI client is interrupted. Because Jenkins merges duplicate build requests into a single queue item, an attacker holding only I...
CVE-2026-33310
CVE-2026-33310 CVE-2026-33310 ╪н┘В┘Ж ╪г┘И╪з┘Е╪▒ ╪╣╪и╪▒ ╪к┘И╪│┘К╪╣ shell ┘Б┘К ╪з┘Д┘В┘К┘Е ╪з┘Д╪з┘Б╪к╪▒╪з╪╢┘К╪й ┘Д┘Д┘Е╪╣┘Д┘Е╪з╪к ┘Е┘Д╪о╪╡ ┘К╪и╪п┘И ╪г┘Ж ╪╡┘К╪║╪й shell ╪п╪з╪о┘Д ╪з┘Д┘В┘К┘Е ╪з┘Д╪з┘Б╪к╪▒╪з╪╢┘К╪й ┘Д┘Д┘Е╪╣┘Д┘Е╪з╪к ┘К╪к┘Е ╪к┘И╪│┘К╪╣┘З╪з ╪к┘Д┘В╪з╪ж┘К┘Л╪з ╪г╪л┘Ж╪з╪б ╪╣┘Е┘Д┘К╪й ╪к╪н┘Д┘К┘Д ╪з┘Д┘Г╪к╪з┘Д┘И╪м. ╪е╪░╪з ┘Г╪з┘Ж ╪з┘Д┘Г╪к╪з┘Д┘И╪м ┘К╪н╪к┘И┘К ╪╣┘Д┘Й ┘В┘К┘Е╪й ╪з┘Б╪к╪▒╪з╪╢┘К╪й ┘Д┘Е╪╣┘Д┘Е╪й ┘Е╪л┘Д shell╪М ┘Б┘В╪п ┘К╪к┘Е ╪к┘Ж┘Б┘К╪░ ╪з┘Д╪г┘Е╪▒ ╪╣┘Ж╪п ╪з┘Д┘И╪╡┘И┘Д ╪е┘Д┘Й ┘Е╪╡╪п╪▒ ╪з┘Д┘Г╪к╪з┘Д┘И╪м...
K000163148: Linux kernel vulnerability CVE-2026-63810
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: block: Avoid mounting the bdev pseudo-filesystem in userspace The bdev pseudo-filesystem is an internal kernel filesystem with which userspace should not interfere. Unregister it so that userspace...
CVE-2025-55182
CVE-2025-55182 React2Shell рд╡рд┐рд╢реНрд▓реЗрд╖рдг рд░рд┐рдкреЛрд░реНрдЯ рдЕрд╕рд╛рдЗрдирдореЗрдВрдЯ рджрд┐рд╢рд╛рдирд┐рд░реНрджреЗрд╢реЛрдВ рджреНрд╡рд╛рд░рд╛ рдЖрд╡рд╢реНрдпрдХ рдЕрдиреБрднрд╛рдЧреЛрдВ рдХреЛ тАЬRequiredтАЭ рд╕реЗ рдЪрд┐рд╣реНрдирд┐рдд рдХрд┐рдпрд╛ рдЧрдпрд╛ рд╣реИред 1. рдкрд░реНрдпрд╛рд╡рд░рдг Required 1.1. Dockerfile Required рдпрд╣ рд╡рд╛рддрд╛рд╡рд░рдг рдЖрдзрд┐рдХрд╛рд░рд┐рдХ Node.js Alpine рдЗрдореЗрдЬ рдкрд░ рдЖрдзрд╛рд░рд┐рдд рдПрдХ рдХрд╕реНрдЯрдо Dockerfile рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рддрд╛ рд╣реИред root@kitploit: FROM node:20-alpine...
CVE-2026-84838
CVE-2026-84838 is a command injection vulnerability in rpmuncompress , a component of the RPM package management toolset. The root cause is that archive filenames containing shell metacharacters are not properly escaped before being passed to shell command strings via popen() , allowing a local a...
CVE-2026-84838 Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...
CVE-2026-84838
A flaw was found in rpmuncompress. This command injection vulnerability allows a local attacker to execute arbitrary commands. This occurs when rpmuncompress processes a specially crafted archive filename containing shell metacharacters, which are not properly escaped before being passed to shell...