981379 matches found
keycloak__keycloak_CVE-2022-3782_20-0-1
Keycloak Keycloak 是一个面向现代应用和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器和 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 关于 Keycloak 的帮助和一般问题的邮件列表 报告安全漏洞 如果你发现了一个安全漏洞，请查看如何正确报告的说明。 报告问题 如果你认为发现了 Keycloak 的一个缺陷，请开启一个问题。请记得提供良好的摘要、描述以及重现问题的步骤。 开始使用 要运行 Keycloak，请从我们的网站下载分发版本。解压并运行： root@kitploit:...
Linux Distros Unpatched Vulnerability : CVE-2026-80977
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: skbuff: don't touch shared zerocopy state in skbtxerror skbtxerror completes the zerocopy uarg and clears SKBFLALLZEROCOPY, and skbzcopydowngrademanaged...
Linux Distros Unpatched Vulnerability : CVE-2026-80994
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: openvswitch: fix flow mask use-after-free on flow deletion The commit in the Fixes tag below made so flow-mask free is scheduled via RCU right after it is...
CVE-2022-24638
AS SEEN ON EXPLOITDB: https://www.exploit-db.com/exploits/51026 THIS VERSION IS FIXED TO PREVENT FALSE NEGATIVES CVE-2022-24637 Exploit for the Unauthenticated RCE in Open Web Analytics OWA 1.7.4. This work is based on https://devel0pment.de/?p=2494. DISCLAIMER: This script is made to audit the...
CVE-2026-89488
A flaw was found in the Linux kernel's Open vSwitch OVS component. An unprivileged user, operating from a user and network namespace, can trigger a use-after-free vulnerability during network namespace teardown. This occurs because packet processing attempts to use connection tracking CT limit...
keycloak__keycloak_CVE-2022-4137_20-0-3
Keycloak Keycloak 是一款面向现代应用程序和服务的开源身份与访问管理解决方案。 此仓库包含 Keycloak 服务器、Java 适配器以及 JavaScript 适配器的源代码。 帮助与文档 文档 用户邮件列表 - 用于寻求帮助和询问 Keycloak 相关问题的邮件列表 报告安全漏洞 如果您发现了安全漏洞，请查阅如何正确报告漏洞的说明 报告问题 如果您认为发现了 Keycloak 中的缺陷，请开启一个 issue。 请记得提供清晰的摘要、描述以及复现该问题的步骤。 快速入门 要运行 Keycloak，请从我们的网站下载发行版。解压并运行： root@kitploit:...
Graylog2__graylog2-server_CVE-2023-41044_5-1-2
Graylog 欢迎！ Graylog 是一个开源日志管理平台。 您可以在我们的官方网站上了解更多项目信息，并在文档站点查阅文档。 问题追踪 发现了一个 Bug？有改进的想法？欢迎提交问题。 贡献 帮助我们构建日志管理的未来，并参与到一个每天被成千上万人使用的项目中。 请遵循贡献者指南并阅读贡献说明以开始。 想要获得报酬来开发我们的开源产品？申请我们的职位！ 保持联系 欢迎加入 freenode IRC 上的 graylog 频道、libera 上的 graylog 频道，或在我们的社区论坛中创建话题与我们聊天。 许可证 Graylog 基于 服务器端公共许可证 SSPL 的第 1 版发...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be...
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be...
CVE-2026-90453
A file-upload handler redirects the authenticated client's browser to a URL taken directly from that same request's Referer header, without validating it against the application's own origin. This allows an authenticated attacker to craft a request that causes another user's browser to be...
CVE-2026-90453
CVE-2026-90453 affects a file-upload handler that redirects an authenticated client's browser to a URL taken directly from the request's Referer header , without validating it against the application's own origin. An authenticated attacker can craft a request that causes another user's browser to...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...
CVE-2026-90450
The application's role-authorization lookup defaults to granting access when a request handler's name is not present in its table of role requirements, rather than defaulting to deny. Any request handler that is not explicitly registered in this table is reachable by any authenticated user...
CVE-2026-90450
CVE-2026-90450 is a fail-open authorization flaw in which the application's role-authorization lookup grants access by default when a request handler is not present in its table of role requirements. Consequently, any request handler not explicitly registered in the table is reachable by any auth...
abusech
abusech ThreatFox 是一个开放的情报共享平台，任何人都可以分享失陷指标（IOC）。 本仓库提供了一个命令行工具（CLI），用于与 ThreatFox API 进行交互。 安装与运行 Brew root@kitploit: brew tap rollwagen/homebrew-tap brew install rollwagen/tap/abusech Go 直接运行： root@kitploit: go run github.com/rollwagen/abusech@latest...
CVE-2026-81000
A flaw was found in the Linux kernel's TUN/TAP driver. An integer underflow vulnerability exists in the tungetuser function when processing oversized headroom requests. This can occur if Open vSwitch OVS propagates an excessively large headroom request to the TUN or TAP device. Successful...
CVE-2026-80994
A flaw was found in the Open vSwitch component of the Linux kernel. A local attacker could exploit a use-after-free vulnerability during flow deletion. This occurs due to a race condition where the flow mask is freed prematurely, allowing subsequent operations to access deallocated memory...
DEBIAN-CVE-2026-89664
In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...
CVE-2026-89664
In the Linux kernel, the following vulnerability has been resolved: nfsd: release OPEN-decoded posix ACLs via oprelease nfsd4decodecreatehow4 calls nfsd4decodefattr4, which allocates refcounted struct posixacl objects via posixaclalloc and stores them in open-oppacl and open-opdpacl. These pointe...