9836 matches found
PT-2026-106741
Mooncake through 0.3.13.post1 contains a missing authentication vulnerability in the Store REST service, which binds to 0.0.0.0 without authentication on any route. Unauthenticated attackers can call routes such as /api/get, /api/put, /api/remove all and /api/mount to read cached KV data with use...
PT-2026-106354
Memory corruption when processing draw objects of incorrect type during graphics command list execution...
CVE-2023-44761_ConcreteCMS-Stored-XSS---Forms
ConcreteCMS Stored XSS v.9.2.1 Autore: Sergio Descrizione: Vulnerabilità di Cross Site Scripting multipla in ConcreteCMS v.9.2.1 che consente a un utente malintenzionato locale di eseguire codice arbitrario tramite uno script manipolato nei Form degli oggetti Data. Vettori d'attacco: Una...
CVE-2023-44765_ConcreteCMS-Stored-XSS---Associations
ConcreteCMS XSS v2.2.18 Autor: Sergio Beschreibung: Eine Cross-Site-Scripting-Schwachstelle in ConcreteCMS v.9.2.1 ermöglicht es einem lokalen Angreifer, beliebigen Code über ein manipuliertes Skript im Plural Handle der Data Objects unter System & Settings auszuführen. Angriffsvektoren: Skriptin...
CVE-2026-40345
deepmerge-ts 8.0.0: DoS da grafo di oggetti ricorsivo Ho riprodotto un bug di esaurimento dello stack nelle versioni di deepmerge-ts precedenti alla 8.0.0. La parte interessante è che il crash non richiede un enorme oggetto annidato. Deriva dall'identità degli oggetti. Se entrambi i valori da uni...
BIT-MOODLE-2026-102580 Moodle: arbitrary class instantiation via report builder audience classname
A flaw was found in Moodle. An authenticated attacker can supply an improperly validated audience class name to the Report Builder component, allowing arbitrary class instantiation. This vulnerability enables the unauthorized creation of internal program objects, which may result in unexpected...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: scsi: qla2xxx: Fixed an issue where free sp in the error path could cause system crashes. System crashes were observed during load/unload tests in a loop. 61110.449331 qla2xxx 0000:27:00.0-0042:0: MSI-X disabled. 61110.467494...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: mm: slub: Avoid waking up kswapd in settrackprepare settrackprepare may cause lock recursion. The issue arises because it is called from hrtimerstartrangens, which holds percpuhrtimerbasesn.lock. However, when...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Avoid NULL pointer dereferencing for evicted BOs It is possible for a BO to exist that is not currently associated with a resource, for example, because it has been evicted. When devcoredump attempts to read the contents...
Astra Linux – Vulnerability in Git
Git is an open-source, scalable, distributed version control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are vulnerable to exposure of sensitive information by malicious actors. When performing a local clone where the source and target of the clone...
Astra Linux – Vulnerability in Linux 5.10, Linux
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftables – A memory leak occurred during the stateful object update. Stateful objects can be updated from the control plane. The transaction logic allocates a temporary object for this purpose. The -init function wa...
Astra Linux – Vulnerability in Bouncycastle
Bouncy Castle for Java before version 1.73 contains a potential Denial of Service DoS issue within the Bouncy Castle org.bouncycastle.openssl.PEMParser class. This class parses OpenSSL PEM-encoded streams containing X.509 certificates, PKCS8-encoded keys, and PKCS7 objects. Parsing a file that...
Astra Linux – Vulnerability in Firefox
An attacker was able to perform out-of-bounds read or write operations on a JavaScript object by exploiting a bug related to range-based bounds checks. This vulnerability affects Firefox versions prior to 124.0.1...
kernel: gfs2: Fix slab-use-after-free in qd_put
A flaw was found in the Linux kernel's GFS2 file system. During filesystem shutdown, quota data objects were freed without being properly removed from the Least Recently Used LRU list. This oversight could lead to a use-after-free vulnerability, where the system attempts to access memory that has...
CVE-2020-15053
CVE-2020-15053 : Artica Proxy vor 4.28.030418 Community Edition erlaubt Reflektiertes Cross-Site-Scripting. Produktbeschreibung: Artica Tech bietet eine leistungsstarke, aber einfach zu bedienende Lösung, die normalerweise großen und multinationalen Unternehmen vorbehalten ist. Mit einem Startpre...
CVE-2023-40361
CVE-2023-40361 Questa vulnerabilità è stata scoperta e divulgata da me stesso. Questo repository conterrà l'avviso. Questo repository è solo a scopo educativo. Collegamenti Blog Post Thinking Objects: https://to.com/news/advisory-secudos-qiata-cve-2023-40361 Blog Post SECUDOS GmbH:...
[SECURITY] Fedora 45 Update: postgresql18-postgis-3.6.4-6.fc45
PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...
[SECURITY] Fedora 45 Update: postgresql17-postgis-3.6.4-6.fc45
PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...
[SECURITY] Fedora 45 Update: postgresql16-postgis-3.6.4-6.fc45
PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...