287464 matches found
CVE-2026-89610
CVE-2026-89610 affects the Linux kernel NTFS subsystem . The mapping pairs decoder validates that the starting LCN is within the volume but fails to check whether the run length extends beyond the volume boundary. A malformed NTFS image with a crafted mapping pairs array can cause the kernel to a...
CVE-2026-89610 ntfs: verify run length exceeding volume boundary
In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...
CVE-2026-89610 ntfs: verify run length exceeding volume boundary
In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...
CVE-2026-89610
In the Linux kernel, the following vulnerability has been resolved: ntfs: verify run length exceeding volume boundary The mapping pairs decoder validates that the starting LCN is within the volume but does not check if the run extends beyond the volume boundary. A malformed NTFS image with a...
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
EUVD-2026-76491
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579 bpf: Harden bloom filter sizing and indexing on 32-bit kernels
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden bloom filter sizing and indexing on 32-bit kernels bloommapalloc has two 32-bit-specific problems when the computed bitmap reaches the U32MAX fallback case. First, BITSTOBYTESU32MAX is evaluated with 32-bit arithmetic...
CVE-2026-89579
CVE-2026-89579 affects the Linux kernel's BPF bloom filter on 32-bit x86 systems. Two distinct flaws exist in bloom_map_alloc() when the computed bitmap reaches the U32_MAX fallback: (1) a 32-bit arithmetic wrap in DIV_ROUND_UP causes under-allocation of the bitmap, and (2) hash values in the ran...
EUVD-2026-76458
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Check svc pool percpu counter allocation svccreate initializes three per-pool percpucounter stats and ignores every return value. On SMP, percpucounterinit fails when allocpercpugfp cannot satisfy the allocation, leaving...
CVE-2026-89493
In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rlused against rlcount in refcount block validator ocfs2findrefcountrecinrl walks the on-disk refcount record array with: for ; i rfrecords.rlused; i++ rec = &rb-rfrecords.rlrecsi; ... rlrecs lives in a single...
CUAHarm
衡量计算机使用代理的危害性 🤗 Hugging Face 📄 论文 📋 简介 CUAHarm 是一个基准测试，旨在评估计算机使用代理（CUA）的安全风险——即能够自主控制计算机执行多步骤操作的 AI 代理。 主要特性 🔍 CUAHarm 数据集 ：包含 104 个真实滥用场景，其中 52 个是需要直接系统交互的计算机使用任务。这些任务涵盖七类恶意目标：凭据窃取、权限提升、网络利用、系统破坏、数据篡改、取证规避和工具利用。 💻 直接终端访问 ：CUAHarm 支持通过直接终端交互为计算机使用代理提供完整的系统访问权限。 💰 Token 成本计算 ：内置功能，用于跟踪代理执行过程中的 Tok...
CVE-2026-80929 sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
In the Linux kernel, the following vulnerability has been resolved: sysctl: move the "cadpid" entry from pidtable to kernreboottable cadpid is global, and killcadpid is only used in the root namespace. However, due to pidtablerootpermissions, a non-root user can unshare pid/user namespaces and...
CVE-2026-81915
Concrete CMS below 9.5.3 has a missing object-level authorization check in the Types::submit() dashboard controller. When updating a Page Type, the controller loaded and saved the Page Type identified by a user-supplied ptID without calling canEditPageType(), allowing a signed-in dashboard user a...
CVE-2020-8635
What's this Wing FTP Server 6.2.3 - Privilege Escalation Exploit Introduction Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and...
CVE-2024-27518
CVE-2024-27518 - SUPERAntiSpyware Professional X 本地权限提升概念验证 此漏洞由 Secunnix 漏洞研究团队的 M. Akil Gündoğan 发现并公开披露。本仓库将包含概念验证代码和相关公告。 详情： 产品： SUPERAntiSpyware Professional X 及所有版本。 受影响版本： =10.0.1262 及最新版本 10.0.1264 CVE ID： CVE-2024-27518 操作系统： 所有受支持的 Windows 版本，已在 Windows 10 Pro 上测试 状态： 公共负责任的披露。 发布日期：...
EUVD-2026-76447
Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...
CVE-2026-81911 Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot save_template via Unescaped Summary Description
Concrete CMS versions 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Board Custom Slot dialog. The customslot savetemplate endpoint authorizes the request only against the target board instance canEditBoardContents and then persists the client-supplied selectedTemplateOptioncollection verbatim,...
CVE-2026-79395
An improper authentication vulnerability in the WS-Security wsse:UsernameToken verification routine within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier allows remote attackers to bypass authentication and execute privileged ONVIF actions including...