cargo-perm

説明 cargoバージョン 1.7.0 に新しい脆弱性が発見されました。こちらで説明されているとおりです。 ステップバイステップ まず、お使いのcargoバージョンが脆弱であることを確認する必要があります。 cargo --version 次のような src/main.rs ファイルを持つcargoプロジェクトがあるとします: root@kitploit: use numbigint::BigInt; use std::str::FromStr; // Silly guessing game fn main let secretnumber =...

CVE-2026-94211: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in Hyve5 Leantime up to 3.9.8. Affected by this issue is some unknown functionality of the file /app/Domain/Dashboard/Templates/show.blade.php of the component Project Dashboard. Such manipulation leads to cross site scripting. The attack may be performed from remot...

CVE-2026-63909

A flaw was found in the ksmbd component of the Linux kernel. A transposed bounds check in the smbcheckpermdacl function can lead to a 2-byte heap out-of-bounds OOB read during Server Message Block SMB2 create operations. This vulnerability may allow a remote attacker to disclose sensitive...

CVE-2026-63909 ksmbd: OOB read regression in smb_check_perm_dacl() ACE-walk loops

In the Linux kernel, the following vulnerability has been resolved: ksmbd: OOB read regression in smbcheckpermdacl ACE-walk loops Commit d07b26f39246 "ksmbd: require minimum ACE size in smbcheckpermdacl" introduced a transposed bounds check: if offsetofstruct smbace, sid + acessize size offset 2...

CVE-2026-53390 ksmbd: fix out-of-bounds read in smb_check_perm_dacl()

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix out-of-bounds read in smbcheckpermdacl The permission-check ACE walk in smbcheckpermdacl validates the ACE header size and caps sid.numsubauth at SIDMAXSUBAUTHORITIES, but it never checks that ace-size is actually larg...

EUVD-2026-45002

Frogman provides headless PBX control through MCP and HTTP API. Prior to 1.6.3, PERMREAD access was sufficient to call fmlistmanagers, fmlistpinsets, fmshowcontext, fmgetmcpconfig, fmbackupstatus, fmwhoscalling, fmrunsavedquery, and fmdiagnosetrunk, exposing AMI manager secrets, outbound dial PIN...

CVE-2026-52930

CVE-2026-52930 (Linux kernel) : The issue is in ipc/shm: orphan cleanup cleanup of shm segments. shm_nattch was updated while holding shm_perm.lock, but shm_destroy_orphaned() traversed shm_ids(ns).rwsem, leading to a race where an orphaned segment could be considered removable before the destina...

MAL-2026-5450 Malicious code in o3forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d094d4429f1492bb6b99d802de86b97dc972e06d680a1287846e6d1635fe457 The package name impersonates the OpenMRS O3 forms ecosystem legitimate packages are published under the @openmrs/ scope. package.json declares an...

CVE-2026-45848

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aasockfileperm Deal with the potential that sock and sock-sk can be NULL during socket setup or teardown. This could lead to an oops. The fix for NULL pointer dereference in unixneedsrevalidation shows...

CVE-2026-45848 apparmor: fix NULL sock in aa_sock_file_perm

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix NULL sock in aasockfileperm Deal with the potential that sock and sock-sk can be NULL during socket setup or teardown. This could lead to an oops. The fix for NULL pointer dereference in unixneedsrevalidation shows...

CVE-2026-41903 FreeScout IDOR Vulnerability: PERM_EDIT_USERS allows modifying any user's notification subscriptions (incomplete fix of CVE-2025-48472)

FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to version 1.8.217, a user holding the PERMEDITUSERS permission intended for general user-profile editing can read and modify the notification subscriptions of any other user, including admins, by sending a...

Unity Linux 20.1070a Security Update: kernel (UTSA-2026-013488)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013488 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-011320)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-011320 advisory. In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in...

The vulnerability of the audit_match_perm() function in the kernel/auditsc.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the auditmatchperm function in the kernel/auditsc.c module of the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

EUVD-2021-24642

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2021-38172

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7. CVE-2021-38172 Note that Nessus relies on the presence of the packa...

CVE-2021-38172

perM 0.4.0 has a Buffer Overflow related to strncpy. Debian initially fixed this in 0.4.0-7...

SUSE CVE-2022-49366

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

DEBIAN-CVE-2022-49366

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix reference count leak in smbcheckpermdacl The issue happens in a specific path in smbcheckpermdacl. When "id" and "uid" have the same value, the function simply jumps out of the loop without decrementing the reference...

CVE-2024-50010

CVE-2024-50010 affects the Linux kernel’s exec path checks. The issue is a race in the path_noexec (and i_mode) checks that led to spurious WARN_ON warnings when noexec is toggled, rather than a real permission failure. The fix removes the redundant path_noexec WARN and updates commentary; no exp...