ft9201-libfprint

ft9201-libfprint Linux 指纹识别支持，适用于 Focal-systems FT9201 USB 读卡器（2808:93a9，作为独立 Windows Hello 加密狗销售），作为 libfprint 的驱动程序。 该传感器是一个微型的 96×96 光学读卡器。libfprint 内置的匹配器在如此小的图像上表现不佳，因此该驱动程序转而复用 FocalTech 自己的匹配引擎 ——其签名 Windows 驱动程序中的 ftWbioEngineAdapter.dll——在 Linux 上通过一个轻量的进程内 PE 加载器原生运行。无需 Wine、无需...

cve-2025-22235-demo

CVE-2025-22235: Spring Boot EndpointRequest.to 认证绕过漏洞演示 漏洞描述 CVE-2025-22235是一个Spring Boot安全漏洞，涉及EndpointRequest.to方法在配置安全规则时可能生成错误的匹配器，导致未暴露的执行器端点路径（如/null/）的安全保护失效。 影响版本 Spring Security 5.7.16 Spring Security 5.8.18 Spring Security 6.0.16 Spring Security 6.1.14 Spring Security 6.2.10 Spring...

CVE-2025-63708

CVE-2025-63708 ID de CVE: CVE-2025-63708 Asignado: 11-12-2025 Tipo de problema: CWE-79 Cross-Site Scripting Producto afectado: "AI Font Matcher" publicado el 2025-10-10, nid=18425 Página del producto:...

CVE-2024-38821-POC

CVE-2024-38821：概念验证（PoC）：Spring Framework 中的认证绕过 这是针对 CVE-2024-38821 漏洞的概念验证 执行步骤 1. 构建 Docker 镜像（基于 Spring Framework 6.1.13 的 Spring Boot 3.3.4） root@kitploit: cd vuln docker build -t cve-2024-38821-poc . 2. 运行容器并将主机的端口 8080 暴露给容器 root@kitploit: docker run -d -p 8080:8080 --name cve-2024-38821-p...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

CVE-2026-41848

CVE-2026-41848...

Linux Distros Unpatched Vulnerability : CVE-2026-72032

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If...

CVE-2026-72032

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

CVE-2026-72032

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

UBUNTU-CVE-2026-72032

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

CVE-2026-72032 net/mlx5: HWS, fix matcher leak on resize target setup failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

CVE-2026-72032

CVE-2026-72032 affects the Linux kernel’s net/mlx5 HWS path. In hws_bwc_matcher_move(), a replacement matcher is allocated before resize target is set; if mlx5hws_matcher_resize_set_target() fails, the replacement is not attached and leaks. The fix destroys the replacement matcher on the resize-t...

CVE-2026-72032 net/mlx5: HWS, fix matcher leak on resize target setup failure

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

EUVD-2026-58990

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hwsbwcmatchermove allocates a replacement matcher before setting it as the resize target. If mlx5hwsmatcherresizesettarget fails, the replacement matcher is not...

PT-2026-72221

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix matcher leak on resize target setup failure hws bwc matcher move allocates a replacement matcher before setting it as the resize target. If mlx5hws matcher resize set target fails, the replacement matcher is no...

CVE-2026-73615

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

EUVD-2026-57819

Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution. Attackers can craft quoted commands that evade blocklist checks and...

keycloak-services: keycloak-services: Authorization bypass via unnormalized URI matching in PathMatcher

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...

CVE-2026-15573 Keycloak-services: keycloak-services: authorization bypass via unnormalized uri matching in pathmatcher

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...

EUVD-2026-53381

A flaw was found in Keycloak's Authorization Services. The component responsible for matching request paths to security policies PathMatcher does not properly normalize URIs before comparison. By adding extra characters like a trailing slash or matrix parameters to a URL, an attacker can trick th...