Nginx UI - Broken Access Control

Network attackers can fully control nginx service, including config modification and service restart, leading to complete service takeover. id: CVE-2026-33032 info: name: Nginx UI - Broken Access Control author: DhiyaneshDk severity: critical description: | Network attackers can fully control ngi...

CUAHarm

コンピューター使用エージェントの有害性の測定 🤗 Hugging Face 📄 論文 📋 はじめに CUAHarm は、コンピューター使用エージェント（CUA）— コンピューターを自律的に制御して複数ステップのアクションを実行できるAIエージェント — の安全性リスクを評価するために設計されたベンチマークです。 主な特徴 🔍 CUAHarm データセット :...

CVE-2026-98007 bpf: Reject non-scalar bpf_loop iteration counts

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpfloop iteration counts bpfloop declares its nrloops argument as ARGANYTHING. Privileged programs may pass pointer values to such arguments, so checkfuncarg lets a pointer-valued R1 reach the helper-specif...

printix-CVE-2022-25089

CVE-2022-25089 システム管理者にとって悪夢のような、認証なしにどこからでもユーザーがレジストリを変更できる問題。 ドキュメントを読む » デモを見る . バグを報告 . 機能をリクエスト 目次 プロジェクトについて 使用技術 はじめに 前提条件 インストール 使用方法 ロードマップ 貢献 ライセンス 著者 謝辞 プロジェクトについて Printix の "Printix Secure Cloud Print Management" バージョン 1.3.1106.0 以下に含まれる PrintixService.exe...

CVE-2026-98007

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject non-scalar bpfloop iteration counts bpfloop declares its nrloops argument as ARGANYTHING. Privileged programs may pass pointer values to such arguments, so checkfuncarg lets a pointer-valued R1 reach the helper-specif...

CVE-2026-77254 MCP Atlassian: Unauthenticated HTTP MCP requests can use globally configured Jira and Confluence credentials

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, requests to the HTTP MCP endpoint without a per-user identity are allowed to reach tool handlers, which then use globally configured Jira or Confluence credentials. A network caller c...

ed25519-unsafe-libs

ed25519-unsafe-libs Ed25519 に対する二重公開鍵署名関数オラクル攻撃 署名関数の入力として秘密鍵と公開鍵を独立して受け取る公開APIを備えた、潜在的に安全でない ed25519 署名ライブラリのリストです。これらの公開APIを誤用すると、秘密鍵が漏えいする可能性があります。 私たちの分析で対象となったリポジトリのほとんどは、IANIX :: Things that use Ed25519 に掲載されています。 影響を受けるライブラリの数: 45 アナウンス後に問題を修正したライブラリの数: 8 最終更新日: 2023年5月4日 この潜在的なエクスプロイトを実証す...

CVE-2026-0073-Android-client-TLS-auth-bypass

CVE‑2026‑0073 は、Android の ADB デーモン adbd における論理バグであり、ワイヤレスデバッグが有効で、かつ一度でも任意のコンピューターとペアリングされたデバイスに対して、攻撃者が TLS 相互認証をバイパスしてリモートシェルを開くことを可能にします。根本原因は、単一の API の誤用です。OpenSSL の EVPPKEYcmp の戻り値が、3 値の結果ではなくブール値として扱われます。 ADB ワイヤレスデバッグにおける通常の認証フロー アンドロイドの開発者向けオプションからワイヤレスデバッグを有効にすると、デバイスはランダムな TCP ポートで待ち受ける...

CVE-2022-26923

CVE-2022-26923 – Certifried エクスプロイト AD CS 悪用 CVE-2022-26923 Certifried の悪用を自動化し、Active Directory Certificate Services AD CS と Resource-Based Constrained Delegation RBCD を悪用した特権昇格を可能にし、ドメイン管理者アカウントの NTLM ハッシュのダンプを実現します。 ⚠️ 教育目的のみ / Lab / HTB 許可されていない環境では使用しないでください。 🎯 説明 このスクリプトは以下の攻撃チェーンを自動化します： 1...

CVE-2026-92255 Netcore NR255-V 1.5.130703 Out-of-Bounds Read in filter_arp_put_file.cgi via String API Misuse

Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in filterarpputfile.cgi caused by improper use of a string handling API. Attackers can trigger an unterminated buffer over-read by exploiting this flaw in the affected component, potentially exposing adjacent memory...

CVE-2026-92255

Netcore NR255-V router version 1.5.130703 contains an out-of-bounds read vulnerability in filter_arp_put_file.cgi, caused by improper use of a string handling API that leads to an unterminated buffer over-read. An authenticated attacker (low privileges) over the network can trigger the flaw, pote...

Astra Linux – Vulnerability in ntfs-3g

The file handle created in fuselibopendir, and later used in fuselibreaddir, enables arbitrary memory read and write operations in NTFS-3G through 2021.8.22 when using libfuse-lite...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86: Added SRCU protection for reading PDPTRs in getsregs2. Added read-side protection when reading PDPTR registers in getsregs2. Reading PDPTRs may trigger access to guest memory: kvmpdptrread - svmcachereg - loadpdptrs ...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/hns: Fixed the use of spinunlockirqrestore, which is called with IRQs enabled. Fixed incorrect use of spinlockirq/spinunlockirq when spinlockirqsave/spinlockirqrestore was held. This issue was discovered through lock...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Firmware: stratix10-svc – Fixed a bug in saving controller data. Fixed the incorrect use of platformsetdrvdata and devsetdrvdata. Both functions refer to the same data, and they override each other. This caused the svc driver’...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15

In the Linux kernel, the following vulnerability has been resolved: virtio-mmio: Do not break the lifecycle of vmdev. vmdev has a separate lifecycle because it has a struct device embedded within it. Therefore, having a release callback for it is correct. However, allocating the vmdev structure...

Linux Distros Unpatched Vulnerability : CVE-2026-89527

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Use svcxprtput to free listener on create failure svcrdmacreate calls kfreecmaxprt when svcrdmacreatelistenid fails. svcxprtinit has already acquired ...

CVE-2026-80999

A flaw was found in the Linux kernel's Realtek Digital Subscriber Line DSA driver. The driver incorrectly uses gpiodsetvalue instead of gpiodsetvaluecansleep for reset GPIO operations. This can lead to system warnings when the reset GPIO is managed by a sleeping controller, potentially causing...

DEBIAN-CVE-2026-89527

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svcxprtput to free listener on create failure svcrdmacreate calls kfreecmaxprt when svcrdmacreatelistenid fails. svcxprtinit has already acquired a net namespace reference via getnettrack; kfree bypasses svcxprtfree...

CVE-2026-89527

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Use svcxprtput to free listener on create failure svcrdmacreate calls kfreecmaxprt when svcrdmacreatelistenid fails. svcxprtinit has already acquired a net namespace reference via getnettrack; kfree bypasses svcxprtfree...