OpenBao Skips Stricter Deny Policy for LIST operations

Impact When a policy operator has written capabilities = "deny" on a path with a trailing wildcard but allowed a broader list operation e.g., a deny on secrets/metadata/restricted/ but allowed list on secrets/metadata/, OpenBao would incorrectly allow the operation. This did not impact other...

sudo security update

An update is available for sudo. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sudo packages contain the sudo utility which allows system administrators to...

CVE-2024-0311

CVE-2024-0311 ? Это PoC для того, что, как я считаю , является CVE-2024-0311, SB10418. Злоумышленник изнутри может обойти существующую политику Skyhigh Client Proxy без действующего кода выпуска. Много деталей. Очень эксплойт. ¯\ツ /¯ PoC внедряется в процесс SCPBypass.exe, запущенный пользователе...

USN-8803-1: Sudo vulnerability

Guannan Wang, Zhanpeng Liu, and Guancheng Li discovered that Sudo failed to apply intercept policy checks when commands were executed under certain circumstances. A local attacker permitted to run specific commands could possibly use this issue to bypass policy enforcement and logging, executing...

WebKit-NavigationAPI-SOP-Bypass

WebKit-NavigationAPI-SOP-Bypass WebKit Navigation API — 교차 포트 가로채기를 통한 동일 출처 정책 우회 CVE-2026-20643...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk — это загрузочный образ с загрузчиком GRUB2, созданный в качестве доказательства концепции не активно поддерживается и не дорабатывается , предназначенный для использования в качестве основы для USB-флешек восстановления. Ключевая особенност...

PHP-CGI-INTERNAL-RCE

PHP-CGI-INTERNAL-RCE 이 PoC는 공격자가 Orange Tsai의 CVE-2024-4577을 DNS 리바인딩과 연결하여 피해자의 웹 브라우저를 통해 내부 네트워크 인프라에서 직접 원격 코드 실행을 달성할 수 있는 방법을 시연합니다. Same-Origin Policy SOP를 우회하고 로컬 XAMPP 서버, 내부 개발 환경 또는 기업 네트워크에서 실행 중인 취약한 PHP-CGI 인스턴스를 악용함으로써, 이 공격은 인터넷에 노출될 의도가 전혀 없던 시스템에서 완전한 코드 실행을 가능하게 합니다. BLOG...

CVE-2026-73551

Envoy is an open-source edge and service proxy for cloud-native applications. Prior to 1.36.10, 1.37.6, 1.38.4, and 1.39.1 , its URL normalization does not recognize dot and dotdot path segments carrying semicolon parameters . A request such as /user/..;foo=bar/admin is not canonicalized to /admi...

CVE-2026-91949

A flaw was found in FreeRDP server. This vulnerability allows unauthenticated attackers to bypass server policies that disable Remote Desktop Services over Transport Layer Security RDSTLS connections. By sending incompatible protocol requests and then completing a TLS handshake, attackers can...

RockyLinux 10 : sudo (RLSA-2026:68692)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:68692 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Bug Fixes and Enhancements: Use canonicalized path if user path...

Linux Distros Unpatched Vulnerability : CVE-2026-93587

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 and before 6.9.13-56 contains a policy bypass in the PCD and, per the upstream advisory, CUBE and HALD coder: when a specific comman...

ALSA-2026:69123 Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...

Important: sudo security update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...

RHEL 9 : sudo (RHSA-2026:69123)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69123 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...

Linux Distros Unpatched Vulnerability : CVE-2026-93590

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ImageMagick before 7.1.2-31 contains a policy bypass vulnerability in the UHDR encoder that fails to perform policy checks during buffer allocation for image...

Linux Distros Unpatched Vulnerability : CVE-2026-93568

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Netty. A remote attacker could exploit this vulnerability by sending specially crafted HTTP/2 or HTTP/3 Extended CONNECT requests. Netty's...

OESA-2026-3962 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: Sudo through 1.9.17p2 fails to apply intercept policy checks ...

Linux Distros Unpatched Vulnerability : CVE-2026-55830

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3...

Metasploit-Module-TFM

CVE 2023-2728 및 CVE 2024-3177에 대한 사용자 정의 Metasploit 모듈 설명 이 사용자 정의 모듈은 각각의 취약점에 영향을 받는 Kubernetes 버전예: v1.27.2는 둘 다에 취약함에서 CVE 2023-2728 및 CVE 2024-3177을 악용합니다. 두 취약점 모두 Kubernetes의 ServiceAccount admission 플러그인에 의해 부과된 마운트 가능한 시크릿 정책을 우회하는 것과 관련되며, 서로 다른 컨테이너 유형과 전략을 사용합니다. 주요 목표는 원하는 시크릿을 획득하여...

RLSA-2026:68692 Important: sudo security, bug fix, and enhancement update

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...