167885 matches found
Log4jPatch
-- Questo repository è stato archiviato -- Lo sviluppo futuro di questo strumento continuerà su corretto/hotpatch-for-apache-log4j2. Grazie per aver condiviso, commentato, provato e contribuito a questo progetto! Log4jPatch Questo è un POC di un semplice strumento che inietta un agente Java in un...
MINI-VQJ4-XH2F-59JG
Bulletin has no description...
MINI-59V4-6W7J-9X36
Bulletin has no description...
MINI-3Q45-7J6M-WF53
Bulletin has no description...
MINI-JXR2-66JF-XR33
Bulletin has no description...
MINI-3GQJ-47FM-RPR2
Bulletin has no description...
MINI-HR6J-9337-CCXM
Bulletin has no description...
CVE-2026-72843 EverShop Missing Authorization on PATCH /api/customers/:id Allows Unauthenticated Account Takeover
The customer update route in EverShop is declared with "access": "public" in packages/evershop/src/modules/customer/api/updateCustomer/route.json, which causes the admin authentication middleware to call next without checking the caller, and no customer-session middleware guards the route; the on...
CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3
CVE-2026-72693 affecting package kbd for versions less than 2.2.0-3. A patched version of the package is available...
CVE-2026-2334 ) Missing Server-Side File Extension Validation in vsDesk
An issue was discovered in vsDesk v14.0101. An authenticated attacker with administrative privileges can bypass client-side file validation in the "Import via CSV" component due to a lack of server-side validation. This allows the upload of an arbitrary file, which can lead to Remote Code Executi...
EUVD-2026-42235
Dgraph Alpha group stores can be replaced via unauthenticated external snapshot import...
MINI-5QQC-Q8MC-9W87
Bulletin has no description...
ROOT-OS-DEBIAN-11-CVE-2025-5987 CVE-2025-5987 in libssh - Patched by Root
Root has patched CVE-2025-5987 in the libssh package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-68431 CVE-2025-68431 in libheif - Patched by Root
Root has patched CVE-2025-68431 in the libheif package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66034 CVE-2026-66034 in libssh2 - Patched by Root
Root has patched CVE-2026-66034 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-66035 CVE-2026-66035 in libssh2 - Patched by Root
Root has patched CVE-2026-66035 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2025-15661 CVE-2025-15661 in libssh2 - Patched by Root
Root has patched CVE-2025-15661 in the libssh2 package for Root:Debian:11. Multiple fixed versions available...
CVE-2026-76833
creationtimestamp| type| source ---|---|--- 2026-08-20 15:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtjj5g6een2r...
CVE-2026-61897 accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
An Ubuntu-specific patch to AccountsService before 23.13.9-8ubuntu7 only partially drops privileges before launching language helper scripts. It changes the effective UID/GID to the target user but leaves the real UID as 0 root. A shell spawned by a helper script inherits ruid=0 and may reset its...