CVE-2026-67273: Improper Neutralization of Special Elements Used in a Template Engine

Dell Container Storage Modules, versions prior to 1.18.0, contains an Improper Neutralization of Special Elements Used in a Template Engine vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...

CVE-2026-70411: Missing Authentication for Critical Function

Dell Container Storage Modules CSM, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-tenant gRPC service TenantService. An unauthenticated adjacent network attacker could potentially exploit this vulnerability, leading to...

CVE-2026-63688: Missing Authentication for Critical Function

Dell Container Storage Modules CSM, versions prior to v1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csm-authorization-storage gRPC server. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to...

Linux Distros Unpatched Vulnerability : CVE-2026-75820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Aspell contains an integer truncation vulnerability in the WritableDict::add function in modules/speller/default/writable.cpp. When loading a personal...

CVE-2026-67269: Improper Privilege Management

Dell Container Storage Modules CSM Operator, versions prior to 1.18.0 contains an Improper Privilege Management vulnerability in the ContainerStorageModule Custom Resource reconciler. A low privileged remote attacker could potentially exploit this vulnerability, leading to escalation of privilege...

PT-2026-106771

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-102262

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

EUVD-2026-92795

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-102262

Newell Brands DYMO ID version 1.5.1.71 is vulnerable to a path traversal issue due to improper spheres of control. The software resolves its plugin Modules directory relative to the process working directory. An attacker can place a malicious job file and DLLs in a directory, then set the process...

CVE-2026-102262 Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control

Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside malicious modules / DLL that sets the process working directory to the job file's folder when a victim clicks on the file, resulting in code...

CVE-2026-104894

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

CVE-2026-104894

The open-source project management tool Plane is vulnerable to a cross-tenant issue linking flaw via an IDOR (Insecure Direct Object Reference) vulnerability in versions prior to 1.4.0 . The modules endpoint fails to validate that issue UUIDs provided in the URL path belong to the caller's worksp...

EUVD-2026-92477

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

CVE-2026-104894 Plane: Cross-Tenant Module Issue Linking via IDOR

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

CVE-2026-104894 Plane: Cross-Tenant Module Issue Linking via IDOR

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

CVE-2026-104894 Plane: Cross-Tenant Module Issue Linking via IDOR

Plane is an open-source project management tool. Prior to 1.4.0, the modules endpoint accepts issue UUIDs in the URL path without validating that they belong to the caller's workspace. An authenticated user can link issues from any workspace to modules in their own workspace. This issue is fixed ...

Exploit-Development

開発したエクスプロイト このリポジトリには、私が公開するエクスプロイトや概念実証コードが含まれます。さらに、Metasploit モジュールや移植したエクスプロイトも含めます。 Metasploit モジュール このディレクトリには、私が開発したすべての Metasploit モジュールが含まれます。このディレクトリ内のコードは、別のディレクトリにあるスタンドアロンの PoC である場合があることに注意してください。 移植したエクスプロイト...

cve-2015-1592

이 파일들은 "Weaponizing Perl Serialization Flaws With MetaSploit"에 관한 제 Houston Perl Mongers 발표에서 논의되었습니다. 이 파일들을 설명하는 발표 영상은 여기에서 볼 수 있습니다: https://youtu.be/Gzx6KlqiIZE storable-.pl 파일들은 metasploit 모듈에서 사용되는 'config' 파라미터 값을 생성하는 데 사용됩니다...

Dell has uncovered vulnerabilities in container storage modules

Dell has addressed the vulnerabilities in Container Storage Modules version 1.18.0 and later. These vulnerabilities reside in Dell Container Storage Modules CSM, which are used for integrating Dell storage systems with container platforms such as Kubernetes and OpenShift. The identified...

Astra Linux - Vulnerability in Golang-1.19

The go command may generate unexpected code during build time when using cgo. This can lead to unexpected behavior when running a go program that uses cgo. This issue may occur when running a trusted module that contains directories with newline characters in their names. Modules retrieved using...