CVE-2022-0848

CVE-2022-0848 part-db 0.5.11におけるリモートコード実行 RCE bashファイル内のホストを変更して実行してください。...

Jenkins build-metrics 1.3 - Cross-Site Scripting

Jenkins build-metrics 1.3 is vulnerable to a reflected cross-site scripting vulnerability that allows attackers to inject arbitrary HTML and JavaScript into the web pages the plugin provides. id: CVE-2019-10475 info: name: Jenkins build-metrics 1.3 - Cross-Site Scripting author: madrobot severity...

CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

DEBIAN-CVE-2026-97423

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423 cxl/region: Validate partition index before array access

In the Linux kernel, the following vulnerability has been resolved: cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value. If the partition was never resolved, part remains at its initial val...

CVE-2026-97423

The Linux kernel contains a vulnerability in the cxl/region component where the construct_region() function fails to validate the cxled->part value before using it as an index for the cxlds->part[] array. If a partition is never resolved, the value remains at -1 , leading to an out-of-bound...

CVE-2022-0848-RCE

CVE-2022-0848 part-db 0.5.11 におけるリモートコード実行（RCE） bash ファイル内のホストを変更して実行すると、RCE 経由でシェルを取得できます。...

Linux Distros Unpatched Vulnerability : CVE-2026-97423

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cxl/region: Validate partition index before array access constructregion reads cxled-part and uses it to index cxlds-part without checking for a negative value...

CVE-2025-48384-PoC-Part2

このリポジトリには README がありません。...

CVE-2025-51867

CVE-2025-51867 脆弱性の説明 Deepfiction AIは、パーソナライズされたストーリーテリングに革命を起こすことを使命とするAIエンターテインメント企業です。Deepfiction AIは、LLMとのチャットを通じてストーリーを作成するWebアプリケーションを提供していますが、そのチャットコンポーネントには、不安全な直接オブジェクト参照（IDOR）の脆弱性があります。攻撃者はこのIDORを悪用して、他のユーザーのクレジットでLLMとチャットすることができます。 攻撃ベクトル APIエンドポイント...

Linux Distros Unpatched Vulnerability : CVE-2026-93048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mtd: part: reject MTDPARTOFSRETAIN in mtdaddpartition mtdaddpartition does not reject the special offset value MTDPARTOFSRETAIN -3, which leads to a WARNON in...

CVE-2026-93048

CVE-2026-93048 affects the Linux kernel MTD partition subsystem. The function mtd_add_partition() fails to reject the special offset value MTDPART_OFS_RETAIN (-3) , which was originally added only for the static partition table path. When passed via the BLKPG ioctl on NAND devices, the RETAIN siz...

EUVD-2026-81673

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-79752: Improper Neutralization of Special Elements used in an SQL Command

CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder::extract, FunctionsBuilder::datePart, and FunctionsBuilder::dateAdd in src/Database/FunctionsBuilder.php accept user-controlled dataType, part, or unit valu...

CVE-2026-85078: Inconsistent Interpretation of HTTP Requests

Sanic is an opensource python web server/framework. In version 25.12.0, Sanic's core HTTP/1.1 chunked-body handling does not fully consume the trailer-part after the terminating zero chunk before reusing the keep-alive connection buffer. A remote unauthenticated client can place attacker-controll...

GO-2026-6366 Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics

Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics...

Astra Linux – Vulnerability in Ruby-Rack

Rack is a modular Ruby web server interface. In versions prior to 2.2.19, 3.1.17, and 3.2.2, Rack::Multipart::Parser could accumulate unbounded data when the header block of a multipart part never ended with the required blank line CRLFCRLF. The parser continuously stored incoming bytes in memory...

Astra Linux – Vulnerability in Thunderbird

If a MIME-encoded email contains an OpenPGP inline signed or encrypted message part, but also contains an additional unprotected part, Thunderbird did not indicate that only certain parts of the message are protected. This vulnerability affects Thunderbird versions earlier than 78.10.2...

Astra Linux – Vulnerability in nss

A flaw was discovered in the implementation of CHACHA20-POLY1305 in NSS versions prior to 3.55. When using multi-part Chacha20, it could lead to out-of-bounds reads. This issue was addressed by explicitly disabling multi-part ChaCha20 which was not functioning correctly and enforcing strict tag...

Allocation of Resources Without Limits or Throttling

Overview org.webjars.npm:multiparty is a multipart/form-data parser which supports streaming Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in its part header handling, which bounds accumulated field values and file sizes but places no lim...