CVE-2026-86134

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Abacre Restaurant Point of Sale POS의 메모리 내 평문 저장. Abacre Restaurant Point of Sale POS 15.0.0.1656까지의 모든 버전은 메모리 내 민감 정보 평문 저장 취약점에 영향을 받습니다. 애플리케이션은 활성화 시도 중에 유효한 장치 바인딩 라이선스 키를 프로세스 메모리에 남깁니다. 이러한 키는 디버거에 프로세스를 연결하고 프로세스/메모리 덤프를 분석하여 획득할 수 있으며, 이후 구매 없이 동일한 머신에서...

EUVD-2026-89605

A NULL pointer dereference vulnerability in the WatchGuard Fireware OS authentication process allows a remote, unauthenticated attacker to crash the management daemon by sending a specially request to the login interface, resulting in a denial of service...

Apache NiFi - Information Disclosure

Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases wher...

NocoBase - VM Sandbox Escape to Remote Code Execution

NocoBase Workflow Script Node executes user-supplied JavaScript inside a Node.js vm sandbox with a custom require allowlist controlled by WORKFLOWSCRIPTMODULES env var. The console object passed into the sandbox context exposes host-realm WritableWorkerStdio stream objects via console.stdout and...

Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta

An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could supply an array parameter for sensitive metadata, such as the wpcapabilities user meta that defines a user's role. During the registration...

CVE-2023-51444

이 README는 GeoServer 개발을 시작하는 데 도움을 줍니다. 소스 코드 체크아웃, 컴파일 및 실행 과정을 안내합니다. GeoServer 개발에는 Java 8, Maven 및 git이 필요합니다. Java 클래스 라이브러리의 미묘한 변경으로 인해 현재 Java 8에서 개발을 요구합니다 결과물은 Java 11에서 테스트되지만. 추가 자료: http://docs.geoserver.org/latest/en/developer/index.html == Linux == 1. 필수 구성 요소 설치 Linux 배포판에서 OpenJD...

magento2-cosmic-sting-patch

Magento 2 CVE-2024-34102일명 Cosmic Sting 패치 Magento 2 확장 모듈로 XXE 취약점 CVE-2024-34102일명 Cosmic Sting를 수정하는 대체 솔루션입니다. Magento를 업그레이드할 수 없거나 공식 패치를 적용할 수 없는 경우 이 패치를 시도해 보세요. 이 취약점을 수정하지 않으면 공격자가 RCE를 실행할 수 있습니다. 실제 공격 사례를 이미 확인했습니다. CVE-2024-34102 영향을 받는 Magento 버전2.3부터 2.3.0 2.4.4-p8 2.4.5 2.4.5-p7...

Linux Distros Unpatched Vulnerability : CVE-2026-100760

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157. CVE-2026-100760 Note that Nessu...

CentOS Linux 8.5 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.5:CLSA-2026:1779369622)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779369622 advisory. - Rsync version 3.4.2 and prior contain an integer overflow vulnerability in the compressed-token decoder where a 32-bit signed counter is no...

CentOS Linux 8.5 [TuxCare] Security Update: postfix / postfix-cdb / postfix-ldap / postfix-lmdb / postfix-mysql / etc (CENTOS8.5:CLSA-2026:1779298645)

The CentOS Linux 8.5 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.5:CLSA-2026:1779298645 advisory. - Postfix before 3.8.16, 3.9 before 3.9.10, and 3.10 before 3.10.9 sometimes allows a buffer over-read and process crash via an enhanced stat...

SUSE CVE-2026-100760

Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157...

CVE-2026-102319

A flaw was found in chromium-browser. An uninitialized resource in the Graphics Processing Unit GPU component can lead to information disclosure by allowing memory to be read from outside the security sandbox. A remote attacker who has already compromised the browser's renderer process could...

CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-102327

Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-102330

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-102320

Missing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-102319

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-102319

Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...