CVE-2023-43356-CMSmadesimple-Stored-XSS---Global-Settings

CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Beschreibung: Cross Site Scripting Schwachstelle in CMSmadesimple v.2.2.18 erlaubt einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript in die Global Meatadata im Menü "Settings- Global Settings Menu" einzuschleusen. Angriffsvektore...

CVE-2026-66007

A flaw was found in datasets. This path traversal vulnerability allows a remote attacker to read arbitrary local files. By providing specially crafted file names in the metadata, an attacker can trick the system into including sensitive local files when datasets are saved or published, leading to...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: ext4: Avoid failures during online resizing due to an overly large flexbgsize. When we perform online resizing on an ext4 filesystem with an excessively large flexbgsize, the following warning is triggered:...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: xfrm: Policy issue: Fixing the metadata dst-dev xmit null pointer dereference. When we attempt to transmit an skb with metadatadst attached i.e., dst-dev == NULL through the xfrm interface, we may encounter a null pointer...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mm/slub: Avoid accessing metadata when the pointer is invalid in objecterr. objecterr reports details about an object for further debugging, such as the freelist pointer, redzone, etc. However, if the pointer is invalid, attempti...

Astra Linux – Vulnerability in exiv2

Exiv2 is a C++ library and command-line utility for reading, writing, deleting, and modifying image metadata in formats such as Exif, IPTC, XMP, and ICC. A buffer overflow vulnerability has been discovered in Exiv2 versions v0.27.3 and earlier. This vulnerability occurs when Exiv2 is used to writ...

Astra Linux – Vulnerability in exempi

The XMP Toolkit SDK versions 2020.1 and earlier are affected by an out-of-bounds read vulnerability that could lead to the disclosure of arbitrary memory. An attacker could exploit this vulnerability to bypass security measures such as ASLR. Exploiting this issue requires user interaction, as the...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: dm: Fixed unconditional IO throttling caused by REQPREFLUSH When a bio with REQPREFLUSH is submitted to dm, sendemptyflush generates a flushbio with REQOPWRITE | REQPREFLUSH | REQSYNC, which causes the flushbio to be throttled by...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bpf: Fixed the metadatadst leak in bpfredirectneigh for arguments bpfredirectneighv4,6 Cilium includes a BPF egress gateway feature that forces outgoing Kubernetes Pods’ traffic to pass through dedicated egress gateways. This...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Nilfs2: Added a missing check for inode numbers in directory entries. Syzbot reported that mounting and unmounting a specific pattern of corrupted Nilfs2 filesystem images causes a use-after-free of metadata file inodes, which...

Astra Linux – Vulnerability in exiv2

Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An infinite loop was discovered in Exiv2 versions v0.27.4 and earlier. This infinite loop occurs when Exiv2 is used to modify the metadata of a specially crafted image file. ...

Astra Linux – Vulnerability in exiv2

An integer overflow in CrwMap::encode0x1810 of Exiv2 0.27.3 allows attackers to trigger a heap-based buffer overflow and cause a denial of service DOS by manipulating metadata...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-switch, Create ingress ACL when needed Currently, the ingress ACL is used for three features. It is created only when the vport metadata match and the prio tag is enabled. However, the active-backup lag mode also uses...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: dm thin: Fixed a use-after-free crash in dmsmregisterthresholdcallback. Reports of faults injecting into the pool metadata device: - BUG: KASAN: Use-after-free in dmpoolregistermetadatathreshold+0x40/0x80. - Reading of size 8 ...

CVE-2026-34207

CVE-2026-34207 تحقق مرشح SSRF من نص اسم المضيف، ولكن الوجهة الفعلية تم تحديدها لاحقًا بواسطة DNS. سمحت هذه الفجوة لعناوين Webhook التي يتحكم فيها المهاجم بالوصول إلى loopback وبيانات التعريف وأهداف الشبكة الخاصة. مقدمة عثرت على هذه المشكلة أثناء مراجعة Typebot ، منصة بناء روبوتات محادثة مفتوحة...

CVE-2026-75899

creationtimestamp| type| source ---|---|--- 2026-08-24 09:43:16+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtszcefdrc2b 2026-08-24 11:14:13+00:00| seen| https://bsky.app/profile/suriq.io/post/3mtt6ezu55n25 2026-08-24 13:15:03+00:00| seen|...

CVE-2026-59561

creationtimestamp| type| source ---|---|--- 2026-08-24 04:46:40+00:00| seen| https://jvn.jp/en/jp/JVN74538868 2026-08-27 00:47:17+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3mtzmqpm2ek2a...

steg-tools

steg-tools Questo è un elenco di strumenti e risorse per imparare e sperimentare con la steganografia e l'occultamento delle informazioni. Strumenti Exiftool è una libreria Perl e un'applicazione da riga di comando per la manipolazione dei metadati di diversi file, inclusi EXIF, GPS, XMP e ID3...

packj

Packj flags malicious/risky open-source packages Packj pronounced package is a tool to help to mitigate software supply chain attacks. It can detect malicious, vulnerable, abandoned, typo-squatting, and other "risky" packages from popular open-source package registries, such as NPM, RubyGems, and...

StegoLab

🕵️ StegoLab – Toolkit tutto-in-uno per la steganografia delle immagini StegoLab è una suite leggera e tutto-in-uno per l'analisi della steganografia delle immagini , progettata per CTF, sfide di cybersecurity e digital forensics. Automatizza l'uso di strumenti popolari come binwalk, steghide,...