CVE-2023-36163

Exploit Title: BuildaGate5library - Reflected Cross-Site Scripting XSS Date: 06/07/2023 Exploit Author: Idan Malihi Vendor Homepage: None Version: 5 Tested on: Microsoft Windows 10 Pro CVE: CVE-2023-36163 PoC: An attacker needs to find the vulnerable parameter mc= and inject the JS code like: 'di...

MC-Log4j-Patcher

MC-Log4J-Patcher 本项目旨在为Minecraft玩家和服务器管理员提供关于最近发现的Log4J漏洞（CVE-2021-44228）的安心保障。 目前，本项目会查找所有Log4J格式字符串（不仅仅是jndi），并根据你的配置将其替换或彻底阻止日志记录。 详见下方的功能、支持的平台等内容。 非常感谢任何人的帮助，无论是通过贡献代码，还是通过提交Issue来建议功能、平台等。 支持的平台 Spigot/Bukkit（已在Spigot 1.8.9、1.12.2上测试） Bungeecord（已在Waterfall上测试） 计划支持的平台 Velocity Sponge...

mc-log4j-patcher

mc-log4j-patcher Reemplaza la versión antigua vulnerable - CVE-2021-44228 de Log4j2 por la última 2.15.0 que contiene la corrección del RCE por JNDI. Probado en Spigot 1.12.2, PaperSpigot 1.8.8, PaperSpigot 1.17.1 Esto está pensado para corregir servidores que actualmente no reciben soporte, como...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053248)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053248 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: fix KASAN use-after-free in fslmcbusremove In fslmcbusremove, mc-rootmcbusdev-mc...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc-bus: Fixed the KASAN use-after-free in fslmcbusremove. In fslmcbusRemove, mc-rootmcbusdev-mcio is passed to fsldestroymcio. However, mc-rootmcbusdev has already been freed in fslmcDeviceRemove. Therefore, referencing...

Astra Linux – Vulnerability in libde265

Libde265 v1.0.4 contains a heap buffer overflow in the mcluma function, which can be exploited through a specially crafted file...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: vfio/fsl-mc: Blocking calls to interrupt handlers without a trigger. The eventfdctx trigger pointer of the vfiofslmcirq object is initially NULL, and it may become NULL if the user sets the trigger eventfd to -1. The interrupt...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: fsl-mc: The use-of-memory issue in driveroverrideshow has been fixed. The driveroverrideshow function reads the driveroverride string without holding the devicelock. However, driveroverridestore uses driversetoverride, which...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: bus: fsl-mc: Do not assume that child devices are all fsl-mc devices Changes in VFIO caused a pseudo-device to be created as a child of fsl-mc devices, resulting in a crash when attempting to bind a fsl-mc device to VFIO. This...

MAL-2026-14305 Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-provider (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e494af2871662b1b342a26141de010623484dfef353b505805f4b41d85d775c1 Package metadata describes mc-provider as 'Theta chain registry ⚛️' and the README is a verbatim copy of the hyperweb-io/chain-registry README...

Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

MAL-2026-14294 Malicious code in mc-registry (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 50f3053643e65c63fa7d8e3d5c48ae3d659650bd0052137099cd8674232780bc Package publishes as mc-registry with description 'Theta chain registry', but its README, badges, homepage layout, and package listing copy the...

PT-2026-72769

In the Linux kernel, the following vulnerability has been resolved: ASoC: amd: acp-sdw-legacy: Bound DAI link iteration create sdw dailinks walks soc dais until it finds an entry with initialised cleared, but soc dais is allocated with exactly num ends entries. If all entries are initialised, the...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: boring-registry, tekton-chains, falcoctl-fips, spire-server-fips, falcoctl, spire-server, cosign-fips, minio, external-secrets-fips, kubescape, gitsign, vexctl, mc...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: mc-fips, minio-fips, boring-registry, falcoctl-fips, spire-server-fips, falcoctl, spire-server, boring-registry-fips, minio, external-secrets-fips, mc...

GO-2024-2632 vulnerabilities

Vulnerabilities for packages: falcoctl, mc, boring-registry, spire-server, minio...

GO-2026-5662 vulnerabilities

Vulnerabilities for packages: trillian, datadog-agent, certificate-transparency, minio-object-browser, loki, prometheus-pushgateway, jaeger, splunk-otel-collector, karma, minio, aws-otel-collector, istio, grafana-pyroscope, telegraf, mcp-grafana, minio-operator, keda, cloud-sql-proxy, tempo, mc...

GO-2024-2454 vulnerabilities

Vulnerabilities for packages: falcoctl, mc, boring-registry, gitsign, spire-server, minio, tekton-chains, kubescape, vexctl...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: trillian, opentelemetry-collector, datadog-agent, certificate-transparency, loki, jaeger, prometheus-pushgateway, splunk-otel-collector, karma, minio, k8sgpt, aws-otel-collector, fluent-bit-plugin-loki, istio, prometheus-operator, amazon-cloudwatch-agent-operator,...