67926 matches found
CVE-2022-1329
WP Elementor 3.6.0/1/2 - Exécution de code à distance Google Dork: aucun Date: 16 avril 2022 Exploit Author: AkuCyberSec https://github.com/AkuCyberSec Vendor Homepage: https://elementor.com/ Software Link: https://wordpress.org/plugins/elementor/advanced/ scroll down to select the version Versio...
nginxrift-CVE-2026-42945
استغلال NGINX Rift لـ RCE CVE-2026-42945 من @DepthFirstDisclosures أداة إثبات مفهوم PoC احترافية للبحث وتحديد ثغرة NGINX Rift، وهي تجاوز سعة مخزن مؤقت حرج في كومة الذاكرة في وحدة ngxhttprewritemodule. نظرة عامة على الثغرة معرف CVE: CVE-2026-42945 الاسم المستعار: NGINX Rift الخطورة: حرجة CVSS 9.2...
CLEANSTART-2026-SF92168 Downloading and building modules with malicious version strings can cause local code execution
Security vulnerability affects the go1.27 package. Downloading and building modules with malicious version strings can cause local code execution...
[SECURITY] Fedora 45 Update: ocaml-easy-format-1.3.4-21.fc45
This module offers a high-level and functional interface to the Format module of the OCaml standard library. It is a pretty-printing facility, i.e. it takes as input some code represented as a tree and formats this code into the most visually satisfying result, breaking and indenting lines of cod...
[SECURITY] Fedora 45 Update: ocaml-astring-0.8.5-38.fc45
Astring exposes an alternative String module for OCaml. This module tries to balance minimality and expressiveness for basic, index-free, string processing and provides types and functions for substrings, string sets and string maps. Remaining compatible with the OCaml String module is a non-goal...
PT-2026-107100
Name of the Vulnerable Software and Affected Versions Hydra versions 1.3.4 through 1.3.6 Hydra versions 1.4.0.dev1 through 1.4.0.dev9 Description Hydra stores legacy instantiate target blocklists and related execution-policy collections in mutable module-level state. An attacker controlling...
PT-2026-107248
Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-sentry versions 0.3.0 through 0.3.7 Description Improper input validation in sentry scaffolder actions allows an authenticated internal user to force the backend to contact unintended destinations...
PT-2026-107269
Name of the Vulnerable Software and Affected Versions Backstage versions prior to 0.4.20 Description The @backstage/plugin-auth-backend-module-oidc-provider package contains improper authentication within the OIDC provider. In deployments utilizing OIDC email-based identity resolution with a...
Unprivileged Local Execution of Kernel-Level Diagnostic Tests within Brocade Fabric OS
: An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset...
CVE-2026-106488: Improper Authentication
Backstage is an open framework for building developer portals. Prior to 0.4.20, the @backstage/plugin-auth-backend-module-oidc-provider package is affected by improper authentication in the oidc provider. Deployments using OIDC email-based identity resolution with a provider that permits unverifi...
ROS-20261006-73-1003
The vulnerability of the setnewpassword function in the drivers/platform/x86/dell/dell-wmi-sysman/passwordattr-interface.c file of the Linux operating system’s X86 device driver module is related to the unencrypted storage of critical information. Exploiting this vulnerability could allow an...
ROS-20261006-73-0048
The vulnerability of the Linux operating system’s kernel security module, AppArmor, is related to coding errors. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
ROS-20261006-73-0122
The vulnerability of the atmelsha204arngreadnonblocking function in the drivers/crypto/atmel-sha204a.c driver of the Linux kernel’s cryptographic accelerator module is related to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
PT-2026-107246
Name of the Vulnerable Software and Affected Versions @backstage/plugin-auth-backend-module-cloudflare-access-provider versions 0.1.0 through 0.4.9 Description Insufficient audience validation in the Cloudflare Access auth provider allows a user with a valid token for a different Access applicati...
Cisco ASA Reachable Assertion (CVE-2021-1422)
A vulnerability in the software cryptography module of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, remote attacker or an unauthenticated attacker in a man-in-the-middle position to cause an unexpected reload of the...
ROS-20261006-73-0078
The vulnerability of the pmruntimereinit function in the drivers/base/power/runtime.c file of the Linux kernel’s device drivers module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...
PT-2026-107267
Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...
PT-2026-107266
Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-gitlab versions prior to 0.8.7 Description Improper authorization exists during GitLab organizational user ingestion. Deployments that enable GitLab organization event ingestion and use scoped catalog...
PT-2026-107247
Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-bitbucket-server versions 0.4.0 through 0.5.14 Description Inconsistent repository filtering occurs during Bitbucket Server catalog event updates. Deployments utilizing event-driven updates may ingest...
