Statement

声明 关于 CVE-2021-36593 和 CVE-2021-36594，我想说明的是，我只提交了一个拆分 CVE-ID 的请求。（两年前） 由于目前没有可用的更新，CVE-ID 将在未来几个月内发布。我们暂时推迟了发布流程。...

Premium Addons for Elementor - Unauthenticated Information Disclosure

Premium Addons for Elementor plugin for WordPress version 4.11.53 and below contains an unauthenticated information disclosure vulnerability.The vulnerability exists due to a missing authorization check in the gettemplatecontent AJAX handler, allowing unauthenticated attackers to retrieve private...

CVE-2017-18019

CVE-2017-18019 正在建设中 : 请稍后回来查看...

CVE-2026-84567

creationtimestamp| type| source ---|---|--- 2026-09-14 22:42:31+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 00:00:09+00:00| seen| https://gist.github.com/ataberk-xyz/2c387bbc201a6ab0d6ed0c4cb610d86a 2026-09-15 04:50:49+00:00| seen|...

Important: Red Hat Security Advisory: redis security update

An update for redis is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

redis: Redis: Arbitrary code execution via TLS pending-data list use-after-free

A flaw was found in Redis. This vulnerability, a use-after-free, exists within the tlsProcessPendingData function, which manages the Transport Layer Security TLS pending-data list when Redis is configured with TLS support. A remote, unauthenticated attacker could exploit this to execute...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: gve: Added a missing NULL check for gveallocpendingpacket in TX DQO. gveallocpendingpacket may return NULL, but gvetxaddskbdqo did not check for this case before dereferencing the returned pointer. A missing NULL check was add...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: mlxsw: spectrumacltcam: A memory leak has been fixed when canceling the rehash operation. The rehash operation is rescheduled with a delay if the number of credits at the end of the operation is not negative—this indicates that t...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: net: nfc: Fixed a use-after-free in localcleanup. A use-after-free occurs in kfreeskb called from localcleanup. This can occur when killing the nfc daemon e.g., neard after detaching an nfc device. When detaching an nfc device,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: Fix UAF in hciaclcreateconnsync This fixes the following UFA in hciaclcreateconnsync where a connection still pending is command submission conn-state == BTOPEN maybe freed, also since this also can happen wi...

CVE-2014-8609-exploit

CVE-2014-8609-exploit 在研究挂起意图（pending intent）利用的过程中，我创建了针对CVE-2014-8609的PoC应用程序。 参考： 1. https://seclists.org/fulldisclosure/2014/Nov/81 2. https://github.com/locisvv/Vulnerable-CVE-2014-8609...

CVE-2026-90601

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graphservice/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits...

PT-2026-90985

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits...

CVE-2025-4686

CVE-2025-4686 等待 USOM 的官方发布。...

CVE-2025-2404

CVE-2025-2404 USOM 正在等待官方发布。...

CVE-2026-7649

creationtimestamp| type| source ---|---|--- 2026-09-12 10:00:18+00:00| seen| https://t.me/shimiscyberworld/1139 2026-09-13 00:00:09+00:00| seen| https://t.me/shimiscyberworld/1139...

CVE-2025-5319

CVE-2025-5319 USOM 正在等待官方发布。...

CVE-2026-Pending-Claude-Desktop-RCE

This repository does not have a README...

CVE-2026-89523

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: cancel pending mlopmwork If the device is reset, suspended or unregistered within that window, the pending work can still run and access vif/bss data that may already be freed, or send MCU commands while the...

AZL-100115 CVE-2026-89510 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Cancel regwork before freeing device on remove c4iwuldstatechange queues regwork to register the RDMA device. c4iwremove can free ctx-dev while this work is pending or running, leaving c4iwregisterdevice accessing the...