Craftcms-PoC-CVE-2026-31266

CVE-2026-31266 - Craft CMS Autorizzazione Mancante Informazioni CVE Campo| Valore ---|--- CVE ID| CVE-2026-31266 Fornitore| Pixel & Tonic Prodotto| Craft CMS Versioni Affette| self::ALLOWANONYMOUSLIVE | self::ALLOWANONYMOUSOFFLINE, ; Proof of Concept root@kitploit: With allowAdminChanges=false cu...

go-dbmigrate

migrate Un helper per le migrazioni scritto in Go. Usalo nel tuo codice Golang esistente oppure esegui i comandi tramite la CLI. root@kitploit: GoCode import github.com/mattes/migrate/migrate CLI go get -u github.com/mattes/migrate Caratteristiche Estremamente semplice da implementare con...

CVE-2021-45232-RCE

CVE-2021-45232-RCE CVE-2021-45232-RCE - Rilevamento batch di vulnerabilità multi-thread Query FOFA title="Apache APISIX Dashboard" Ambito di impatto Apache APISIX Dashboard 2.10.1 POC: root@kitploit: IP:PORT/apisix/admin/migrate/export Se ti è stato utile, per favore lascia una stella prima di...

CVE-2021-45232-RCE

CVE-2021-45232 CVE-2021-45232 Apache APISIX Dashboard API unberechtigter RCE Version: 2.10.1 Fofa: Titel="Apache APISIX Dashboard" PoC: root@kitploit: IP:PORT/apisix/admin/migrate/export...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: zsmalloc: Fixed races between asynchronous zspage free operations and page migration. The asynchronous zspage free worker attempts to lock the entire page list of a zspage without protecting against page migration. Since pages...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fixed NULL pointer dereferencing in svmmigratetoram ./drivers/gpu/drm/amd/amdkfd/kfdmigrate.c:985:58-62: Error: p is NULL, but it was dereferenced...

CVE-2026-74644

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

CVE-2026-74644 mm/damon/ops-common: putback folios on invalid migrate nid

In the Linux kernel, the following vulnerability has been resolved: mm/damon/ops-common: putback folios on invalid migrate nid damonpamigrate and damosvamigrate isolate folios into a local list and then call damonmigratepages. When targetnid is invalid including the scheme default NUMANONODE / -1...

GO-2026-5327 vulnerabilities

Vulnerabilities for packages: cilium, datadog-agent, ksops, terraform-provider-pagerduty, opentelemetry-collector-contrib, juicefs, teleport, kubeflow-pipelines, grafana-mimir, grafana, ratify, dapr, argo-cd, grafana-agent-operator, tetragon, weaviate, thanos, ferretdb, promxy, wal-g,...

GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-operator, conftest, crossplane-provider-aws-cloudformation, kubernetes-dashboard-web, trino, terraform-provider-sendgrid, crossplane-provider-aws-sqs, prometheus-pushgateway, zarf, runc, pulumi-kubernetes-operator, telegraf, lvm-driver, aws-flb-kinesis,...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, conftest, harbor-scanner-trivy, cert-exporter, crossplane-provider-aws-cloudformation, trino, crossplane-provider-aws-sqs, vault-k8s, zarf, crossplane, istio, kubeflow-pipelines, nri-couchbase, newrelic-nri-statsd,...

GO-2026-4984 vulnerabilities

Vulnerabilities for packages: prometheus-operator, shfmt, conftest, harbor-scanner-trivy, cert-exporter, cilium-certgen, trino, k8ssandra-client, prometheus-pushgateway, zarf, crossplane, istio, runc, newrelic-nri-statsd, telegraf, lvm-driver, aws-flb-kinesis, dask-gateway, ratify,...

GO-2026-4981 vulnerabilities

Vulnerabilities for packages: prometheus-operator, conftest, trino, k8ssandra-client, zarf, crossplane, istio, runc, telegraf, lvm-driver, aws-flb-kinesis, dask-gateway, ratify, azure-service-operator, k3s, kubernetes-dashboard, aactl, kubevela, opencost, secrets-store-csi-driver-provider-azure,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: prometheus-operator, conftest, kubernetes-dashboard-web, timescaledb-tune, terraform, ratify, azure-service-operator, docker-credential-gcr, fzf, kubernetes-csi-driver-hostpath, aactl, aws-otel-collector, k3s, kubernetes-dashboard, nri-redis, ip-masq-agent, dex,...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: mm/pagealloc: The migrate type of all pageblocks during coalescence needs to be changed. When a page is freed, it coalesces with a buddy page into a higher-order page whenever possible. When the migrate type of the buddy page...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: migrate: corrected lock ordering for hugetlb file folio operations Syzbot has identified a deadlock analyzed by Lance Yang: 1 Task 5749: Holds foliolock, then attempts to acquire immaprwsem read lock. 2 Task 5754: Holds...

CVE-2026-64576

In the Linux kernel, the following vulnerability has been resolved: nexthop: initialize extack in nhresbucketmigrate nhresbucketmigrate passes an uninitialized netlinkextack to callnexthopresbucketnotifiers. When nhnotifierresbucketinfoinit fails e.g. the kzalloc returns -ENOMEM, the error is...

@aws-amplify/amplify-util-uibuilder (>=1.2.13-studio-q1-release.0, <=1.14.27), @aws-amplify/cli (>=7.6.11-beta.0, <=7.6.26) +4 more potentially affected by CVE-2025-4318 via @aws-amplify/codegen-ui-react (>=2.1.0, <=2.14.2)

@aws-amplify/codegen-ui-react NPM version =2.1.0, =1.2.13-studio-q1-release.0, =7.6.11-beta.0, =7.6.26-npm-pkg-cli.0, =7.6.27-alpha.5030, =0.1.0-alpha.0, =0.1.0-next.0 - edilkamin 0.0.1 Source cves: CVE-2025-4318 Source advisory: OSV:GHSA-HF3J-86P7-MFW8...

UBUNTU-CVE-2026-64472

In the Linux kernel, the following vulnerability has been resolved: vfio/mlx5: Fix racy bitfields and tighten struct layout Bitfield operations are not atomic, they use a read-modify-write pattern, therefore we should be careful not to pack bitfields that can be concurrently updated into the same...

CVE-2026-64472

The CVE-2026-64472 entries describe a Linux kernel fix for vfio/mlx5: a racy bitfield layout was tightened by splitting bitfields and moving certain flags to dedicated storage units. The root cause was non-atomic bitfield operations using read-modify-write patterns, which could lead to concurrent...