vLLM 0.8.3 - 0.14.0 - Information Disclosure

vLLM 0.8.3 to - 0.14.1 contains an information disclosure caused by leaking a heap address in error messages from the multimodal endpoint when processing invalid images, letting remote attackers reduce ASLR entropy, exploit requires sending invalid images. id: CVE-2026-22778 info: name: vLLM 0.8....

[SECURITY] Fedora 45 Update: gnote-51~beta-2.fc45

Gnote is a desktop note-taking application which is simple and easy to use. It lets you organize your notes intelligently by allowing you to easily link ideas together with Wiki style interconnects. It is a port of Tomboy to C++ and consumes fewer resources...

threat_note

Please check out https://www.threatnote.io for the latest threatnote...

TJ-OPT

TJ-OPT 릴리스 날짜 2024년 9월 9일 소개 펜테스터로서 유용한 정보를 많이 담고 있는 훌륭한 리소스, 치트 시트, 가이드라인이 많이 있습니다. 하지만 여기저기 흩어져 있는 이러한 메모나 리소스를 찾는 일은 답답하고 시간이 많이 걸릴 수 있습니다. 여러 가지 메모 도구를 사용하여 시스템 전체에 로컬로 저장해 둔 방대한 양의 메모는 말할 것도 없습니다. 게다가 일부 펜테스터는 폐쇄된 환경에서 진행되는 진단 업무를 맡아 장치에 있는 메모와 파일을 전송하기가 더 어려울 수도 있습니다. 과거에는 Joplin으로 메모를 관리했지...

obsidian-note-toolbar-PoC

propNAME → js: 변수 체인을 통한 Note Toolbar의 Frontmatter 기반 임의 코드 실행 CVE 상태: 요청됨, 할당 대기 중. 이 발견은 GHSA-q8cw-3m8c-5pf2로 공개되었습니다. CVE가 할당되면 이 저장소는 CVE-YYYY-NNNNN-obsidian-note-toolbar-PoC로 이름이 변경되고 이 배너는 CVE 링크로 대체됩니다. | ---|--- 연구자| Dostxodjayev Abdullox @squeeze440 권고| GHSA-q8cw-3m8c-5pf2 CVSS 3.1| 7.0...

CVE-2026-33657

CVE-2026-33657 - EspoCRM 9.3.3 이메일 알림 저장형 HTML 삽입 EspoCRM 9.3.3 이메일 알림의 저장형 HTML 삽입에 대한 인증된 개념 증명PoC입니다. 요약 EspoCRM 9.3.3은 스트림 노트 알림 이메일을 렌더링할 때 노트 본문을 Markdown으로 변환하고, 결과 HTML을 삼중 중괄호post로 이메일 템플릿에 삽입합니다. 스트림 게시물을 생성하고 알림을 트리거할 수 있는 인증된 사용자는 이후 생성된 이메일 본문에 렌더링되는 공격자 제어 HTML을 저장할 수 있습니다. 이 익스플로잇은...

CVE-2011-2523

안녕, 해커 우리는 당신이 한 것을 보았습니다. 돈을 많이 벌었죠? 당신의 Github 리포지토리는 안전하게 암호화되었습니다 리포지토리를 복호화하려면 다음 주소로 0.01 BTC를 보내십시오 bc1qhte7j77f8uxep66w5k57kzqaqcu8ldvwe7g5gm...

CVE-2022-39802

3242933 – CVE-2022-39802 SAP Manufacturing Execution의 파일 경로 탐색 취약점 일반 정보 위험: 치명적 영향받는 버전: SAP MFG EXECUTION CORE 15.1 SAP MFG EXECUTION CORE 15.2 SAP MFG EXECUTION CORE 15.3 벤더 URL: https://sap.com 버그: 파일 경로 탐색 취약점 보고일: 2022년 9월 공개 권고일: 2022년 10월 12일 참조: SAP 보안 노트 3242933 작성자: RedRays R&D 설명 권고 정...

Exploit for Use After Free in Linux Linux_Kernel

redmi-note-12t-pro-kernel English | 简体中文README.zh-CN.m...

CVE-2026-97868

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

EUVD-2026-87113

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2026-97868 sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross site scripting

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2026-97868

The software sheshbabu zen (up to version 1.5.0 ) is vulnerable to a cross-site scripting (XSS) vulnerability. The root cause is the use of the dangerouslySetInnerHTML function within the features/notes/NotesEditor.jsx file of the Note Editor component. This flaw allows for remote initiation of a...

CVE-2026-97868 sheshbabu zen Note Editor NotesEditor.jsx dangerouslySetInnerHTML cross site scripting

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2026-97868: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been detected in sheshbabu zen up to 1.5.0. Affected by this issue is the function dangerouslySetInnerHTML of the file features/notes/NotesEditor.jsx of the component Note Editor. The manipulation leads to cross site scripting. The attack may be initiated remotely. Th...

CVE-2026-77293

The collaborative travel planner TREK is vulnerable to an Insecure Direct Object Reference (IDOR) or Broken Access Control issue in versions prior to 3.3.0 . The DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint fails to properly verify if the target note-file belongs to the a...

CVE-2026-77293 TREK: Cross-user note-file deletion (IDOR / Broken Access Control)

TREK is a collaborative travel planner. Prior to 3.3.0, the DELETE /api/trips/:tripId/collab/notes/:noteId/files/:fileId endpoint authorizes an authenticated user against the attacker-controlled tripId but deleteNoteFile in server/src/services/collabService.ts resolves the target only by note and...

CVE-2026-55179

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...

CVE-2026-55105 Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.6.15 and 3.7.2, packages/renderer/MdToHtml/rules/fountain.ts passes HTML generated by the vendored fountain.js renderer into note output without sanitizing it. A malicious Fountain...

CVE-2026-55179 Joplin: Logic error in Joplin Server allows a signed-in user to read any note from its internal server ID

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.2, Joplin Server's GET /items/:id/content route in packages/server/src/routes/index/items.ts loads item content from an attacker-supplied internal server ID without checking...