522 matches found
flare-qdb
FireEye Labs Query-Oriented Debugger flare-qdb is a command-line and scriptable Python-based tool for evaluating and manipulating native program state. It uses Vivisect to set a breakpoint on each queried instruction and executes Python code when hit. flare-qdb frees the analyst to take a nonline...
CVE-2026-107732
The multi-format reader SumatraPDF for Windows (version 3.6.1 and earlier ) is vulnerable to markup/command-link injection . The issue occurs because untrusted document paths and PDF link targets are interpolated into notification text, which the ParseTip() function interprets as trusted tip mark...
CVE-2026-20841
La précision de cette méthode de déclenchement du PoC n'a pas été vérifiée et doit être considérée comme informative/référence uniquement. CVE-2026-20841 - Windows notepad.exe RCE Condition d'exploitation : Testé sur : Version du Bloc-notes 11.2510.14.0 Étape 1 : Enregistrer le fichier Étape 2 :...
CVE-2017-1000117
CVE-2017-1000117 ملخص المشروع أحد مواضيع تصميم دورة أمن الشبكات إعادة إنتاج ثغرة CVE-2017-1000117 PoC+Exp Git + SSH ملخص الثغرة: اسم الثغرة: ثغرة حقن أوامر Git رقم CNNVD: CNNVD-201708-670 مستوى الخطر: متوسط رقم CVE: CVE-2017-1000117 نوع الثغرة: حقن أوامر تاريخ النشر: 2017-08-16 نوع التهديد: عن بُ...
Rocky Linux 9 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_69123)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from the...
Rocky Linux 10.2 [CIQ] Security Update: sudo / sudo-debuginfo / sudo-debugsource / sudo-python-plugin / etc (crlsa-2026_68692)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202668692 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Bug Fixes and Enhancements: Use canonicalized path if user path...
Rocky Linux 9.6 [TuxCare] Security Update: libsolv / libsolv-demo / libsolv-devel / libsolv-tools / perl-solv / etc (ALMALINUX9.6:CLSA-2026:1783417594)
The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783417594 advisory. - A flaw was found in libsolv. This heap buffer overflow occurs during the decompression of attacker- controlled compressed data within .so...
SUSE CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
DEBIAN-CVE-2026-91840
A flaw was found in NetworkManager-vpnc. This vulnerability allows a local unprivileged user to escalate privileges to root. By injecting a newline character into the VPN username field, an attacker can manipulate the vpnc configuration to execute an arbitrary program with root privileges when th...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
RHEL 10 : sudo (RHSA-2026:71354)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:71354 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...
MiracleLinux 9 : sudo-1.9.17p2-3.el9_8.1 (AXSA:2026-1888:05)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1888:05 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly fr...
CVE-2026-85288
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WMMACRODLGRUNMACRO, the Run a Macro Multiple Times entry point, calls macroPlayback without the validation used by command. A tampered shortcuts.xml macro...
RLSA-2026:69123 Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...
EUVD-2026-84571
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, Notepad++ incompletely enforces shortcuts.xml HMAC validation because WMMACRODLGRUNMACRO, the Run a Macro Multiple Times entry point, calls macroPlayback without the validation used by command. A tampered shortcuts.xml macro...
RockyLinux 9 : sudo (RLSA-2026:69123)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:69123 advisory. sudo: Sudo: Policy bypass allows unauthorized program execution via execveat CVE-2026-82474 Tenable has extracted the preceding description block directly from t...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
ALSA-2026:69123 Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root. Security Fixes: sudo: Sudo: Policy bypass allows unauthorized...
RHEL 9 : sudo (RHSA-2026:69123)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:69123 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...