CVE-2023-43494

CVE-2023-43494 Jenkins 2.50 à 2.423 inclus, LTS 2.60.1 à 2.414.1 inclus Lecture de fichier Références : https://www.jenkins.io/security/advisory/2023-09-20/SECURITY-3261 http://www.openwall.com/lists/oss-security/2023/09/20/5...

PENTEST-LAB

PENTEST-LAB Une application vulnérable moderne et un cyber range pour apprendre la sécurité web, API, cloud, IA et blue team grâce à des chaînes d'attaque pratiques. root@kitploit: ╔═══════════════════════════════════════════════════════════════╗ ║ ██████╗ ███████╗███╗...

CVE-2026-46242

CVE-2026-46242 полный poc и lpe Kernel Range Status Notes 5.15.209 - 5.16 Подвержена Бэкпортирован с внедряющим коммитом 6.1.175 - 6.2 Подвержена Бэкпортирован с внедряющим коммитом 6.4 - 6.18.32 Подвержена Ошибка внедрена в основной линии 6.4 6.19 - 7.0.9 Подвержена Включает последний стабильный...

nginx

CVE-2017-7529 당승표@portfolio10 Résumé Ce laboratoire reproduit la vulnérabilité de cache CVE-2017-7529 survenue lors du traitement des requêtes Range du serveur Nginx, et le comportement réel de la vulnérabilité Vulnérabilité : exposition possible de données en cache due à une erreur de traitement...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

CVE-2026-86885

CVE-2026-86885 is an input validation flaw in iOS 27 and iPadOS 27 that an attacker within radio range can exploit without privileges or user interaction to cause unexpected system termination (denial of service). The CVSS 3.1 score is 6.5 (MEDIUM) , with a vector of AV:A/AC:L/PR:N/UI:N/S:U/C:N/I...

CVE-2026-86885

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

EUVD-2026-77925

An input validation issue was addressed with improved input validation. This issue is fixed in iOS 27 and iPadOS 27. An attacker in radio range may be able to cause unexpected system termination...

OESA-2026-3825 libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing...

OESA-2026-3782 libsoup security update

libsoup is an HTTP client/server library for GNOME. It uses GObjects and the glib main loop, to integrate well with GNOME applications, and also has a synchronous API, for use in threaded applications. Security Fixes: A heap out-of-bounds read flaw was found in libsoup. When parsing multipart HTT...

CVE-2023-23752

Joomla! divulgation d'informations - exploit CVE-2023-23752 Exploit pour CVE-2023-23752 4.0.0 = Joomla = 4.2.7. Utilisation Avant d'utiliser le projet, nous devons installer les paquets nécessaires je recommande de créer un environnement virtuel au préalable root@kitploit: pip install -r...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: x86/amdnb: The function amdgetmmconfigrange uses rdmsrsafe, which should not be used without proper safeguards. Xen does not provide the MSRFAM10HMMIOCONFbase to all guests. This results in the following warning: Unchecked MSR...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

The “Use After Free” vulnerability in the Linux kernel allows for the execution of code in a local environment on Linux, x86, and ARM bluetooth modules. This vulnerability is associated with program files located at https://gitee.com/anolis/cloud-kernel/blob/devel-5.10/net/bluetooth/afbluetooth.C...

Astra Linux – Vulnerability in node-semver

Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service ReDoS via the function new Range, when untrusted user data is provided as a range...

Astra Linux – Vulnerability in Rails

Active Storage allows users to attach cloud and local files in Rails applications. Before versions 8.1.2.1, 8.0.4.1, and 7.2.3.1, when serving files through Active Storage’s proxy delivery mode, the proxy controller would load the entire requested byte range into memory before sending it. A reque...

Astra Linux – Vulnerability in imagemagick

A vulnerability was discovered in ImageMagick, causing a value of type ‘unsigned char’ to fall outside the representable value range when crafted or untrusted input is processed in the coders/psd.c file. This results in a negative impact on the availability of the application or other problems...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fixed a potential NULL pointer dereference in the atomctrlgetsmcsclkrangetable function. The function atomctrlgetsmcsclkrangetable does not check the return value of smuatomgetdatatable. If smuatomgetdatatable fails t...

Astra Linux – Vulnerability in imagemagick

In /MagickCore/statistic.c, there are several places where a sizet cast should have been replaced with an ssizet cast. This causes out-of-range values under certain circumstances when a crafted input file is processed by ImageMagick. Red Hat Product Security classified this as Low severity becaus...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fixed a crash that occurred with stop filters in single-range mode. A check for !buf-single was added before calling ptbufferregionsize in places where a missing check could cause a kernel crash. This fix...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: cifs: The xid leak in cifscopyfilerange has been fixed. If the file is used by swap, before returning -EOPNOTSUPP, the xid should be freed. Otherwise, the xid will be leaked...