141176 matches found
DEBIAN-CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98201
In the Linux kernel, the following vulnerability has been resolved: Input: zero ffeffect before compat copy in inputffeffectfromuser In the compat path inputffeffectfromuser aliases the caller's native struct ffeffect with the smaller struct ffeffectcompat and copies only the compat sized prefix:...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
UBUNTU-CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2021-41773-Apache-Lab
CVE-2021-41773 — Laboratoire Apache HTTP Server 2.4.49 Reproduction de CVE-2021-41773 , une vulnérabilité de traversée de chemin dans Apache HTTP Server 2.4.49. Ce projet utilise Docker pour créer un environnement vulnérable isolé et un PoC Python pour démontrer la divulgation contrôlée de...
CVE-2026-98318 smb: client: validate absolute native symlink targets before NT fixups
In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...
CVE-2026-98255 tcp: exclude old ACKs from tcp fast path
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
EUVD-2026-93183
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255 tcp: exclude old ACKs from tcp fast path
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
CVE-2026-98255
The Linux kernel contains a vulnerability where old Acknowledgements (ACKs) could bypass the fast path of the TCP stack. Specifically, ACKs before SND.UNA and after SND.NXT were not being properly validated, potentially allowing them to modify connection state or advance RCV.NXT prematurely. The ...
CVE-2026-98255
In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...
Incident-Response-Report-TeamCity-Compromise-CVE-2024-27198-
تقرير الاستجابة للحوادث: اختراق TeamCity CVE-2024-27198 المحلل: بلال عبد السلام التاريخ: يوليو 2026 المختبر/البيئة: CyberDefenders JetBrains 📄 الملخص التنفيذي يوثق هذا التقرير التحليل الجنائي لخادم JetBrains TeamCity المخترق الإصدار 2023.11.3. من خلال تحليل حزمة التقاط الشبكة المقدمة .pcap، أكد...
CVE-2026-104982
A flaw was found in Xreader. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted electronic publication EPUB document. Due to improper path sanitization in the EPUB file handler, the application is susceptible to path traversal, potentially leading to...
path-traversal-CVE-2026-14628
عرض توضيحي لتجاوز المسار - دراسة حالة: CVE-2026-14628 عرض توضيحي صغير وقابل للتشغيل لفئة ثغرات تجاوز المسار CWE-22 ، مستخدماً الثغرة المُكشفة مؤخراً CVE-2026-14628 كنقطة مرجعية من العالم الواقعي. الثغرة الفعلية تؤثر CVE-2026-14628 على 'NousResearch/hermes-agent' 2026.5.16. تقوم دالة extractmedia ...
CVE-2026-40022
تجاوز المصادقة في camel-platform-http-main على مسارات السياق غير الجذرية CVE-2026-40022 يوضح هذا المشروع تجاوز المصادقة في مكون camel-platform-http-main الخاص بـ Apache Camel خادم HTTP/الإدارة المضمن في بيئة تشغيل Camel main، والمُتتبع باسم CVE-2026-40022. عند تمكين المصادقة وتكوين مسار سياق غير...
Path Traversal
Apache MINA SSHD is vulnerable to path traversal. The vulnerability is due to insufficient path validation on Windows, where the sshd-git component fails to properly restrict file system paths and an authenticated remote user can craft directory traversal sequences to access git repositories...
CVE-2026-25057
CVE-2026-25057 MarkUs is a web application for grading student assignments. Summary MarkUs assignment configuration ZIP uploads are vulnerable to path traversal Zip Slip, allowing arbitrary file write and enabling remote code execution. Details Archive entry names are used to construct filesystem...
CVE-2021-43798
CVE-2021-43798 1. الملخص Grafana هي منصة مفتوحة المصدر تدعم مراقبة البيانات وإدارتها، وتوجد في الإصدارات التالية ثغرة اجتياز المسار Path Traversal التي تسمح بالتلاعب بمسارات الملفات باستخدام أحرف خاصة مثل ../. 8.0.0 وما فوق، وأقل من 8.0.7 8.1.0 وما فوق، وأقل من 8.1.8 8.2.0 وما فوق، وأقل من 8.2.7...
Improper Limitation Of A Pathname To A Restricted Directory
Werkzeug is vulnerable to Improper Limitation of a Pathname to a Restricted Directory. The vulnerability is due to safejoin failing to remove an empty NTFS Alternate Data Stream ADS marker before checking Windows device names, which allows an attacker to request a path ending in NUL: and cause th...