Linux Distros Unpatched Vulnerability : CVE-2026-57222

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The vulnerability exists due to improper memory boundary checks within the newly optimized HTTP/2 state tracker. When handling highly fragmented or out-of-order...

PT-2026-90448

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f fs: Prevent deadlock during ep0 read loop Currently, ffs ep0 read holds ffs-mutex when it prepares to go to sleep waiting for an event. When no setup events are pending, it calls wait event interruptible exclusive...

PT-2026-90257

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss unwrap resp priv length checks gss unwrap resp priv validates the RPCSEC GSS opaque length with offset = u8 p - u8 head-iov base; if offset + opaque len rcv buf-len goto unwrap failed; maj stat = gss unwrapctx-...

PT-2026-90447

In the Linux kernel, the following vulnerability has been resolved: cxl/ras: Fix cxl rch get aer info out-of-bounds AER register read cxl rch get aer info copies the RCH Downstream Port AER capability from the RCRB MMIO block using a readl loop bounded by sizeofstruct aer capability regs. This...

PT-2026-90209

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate rl used against rl count in refcount block validator ocfs2 find refcount rec in rl walks the on-disk refcount record array with: for ; i rf records.rl used; i++ rec = &rb-rf records.rl recsi; ... rl recs lives in ...

GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API...

CVE-2025-7766

CVE-2025-7766 PoC Эксплойт PoC для эксплуатации уязвимости XML External Entity в CVE-2025-7766. Демонстрирует чтение файла /etc/passwd и внеполосные HTTP-обратные вызовы. Автор : Byte Reaper CVE : CVE-2025-7766 Уязвимость : Удаленное выполнение кода через XML External Entity XXE PoC для...

CVE-2025-44137

CVE-2025-44137 Неавторизованное чтение файла в MapTiler Tileserver-php v2.0. Описание MapTiler Tileserver-php v2.0 уязвим для Directory Traversal. Функция renderTile в tileserver.php отвечает за доставку тайлов, хранящихся в виде файлов на сервере, по веб-запросам. При формировании пути к файлу...

dirtycow.cr

dirtycow Эксплойт CVE-2016-5195 Установка Перейдите в раздел релизов или используйте ваше окружение Crystal. Использование root@kitploit: dirtycow --target /path/to/root/file --string "string to write" --offset...

CVE-2026-84941

CVE-2026-84941 is an XML External Entity (XXE) injection vulnerability in the SAML IdP Metadata Parsing of Omada Controller . An authenticated user with SAML configuration privileges can exploit insufficient validation of user-supplied SAML metadata to read arbitrary local files, leading to infor...

CVE-2026-84941 Omada Controller XML External Entity (XXE) Injection in SAML IdP Metadata Parsing Leading to Arbitrary Local File Read

An information disclosure vulnerability in the SAML Single Sign-On SSO functionality of Omada Controller allows an authenticated user with SAML configuration privileges to access sensitive information due to insufficient validation of user-supplied SAML metadata. Successful exploitation could...

CVE-2023-31445-Unprivileged-Information-Disclosure

CVE-2023-31445-Unprivileged-Information-Disclosure 이 저장소는 Dodge Industrial Team이 Dodge OPTIFY 플랫폼에서 발견한 CVE-2023-31445에 대한 설명을 포함합니다. CVE ID: CVE-2023-31445 공급업체: Cassia Networks 제품: Access Controller 버전: Cassia-AC-2.1.1.2203171453 취약점: 비권한 정보 노출 영향: 로그, 사용자 데이터 설명: 읽기 전용 사용자는 다른 모든 사용자를 열거하고 이메일...

CVE-2026-77807 AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 11.0.4 - Unauthenticated Arbitrary File Read via 'user[name]' Parameter

The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 11.0.4 via the username Parameter. This makes it possible for unauthenticated attackers to read the conten...

CVE-2026-77807

CVE-2026-77807 is a Directory Traversal vulnerability in the AcyMailing WordPress plugin (all versions up to and including 11.0.4 ), accessible via the user[name] parameter. An unauthenticated attacker can read arbitrary files on the server, potentially exposing sensitive information. Exploitatio...

Gitea-Forgejo-CVE-2025-68937

Уязвимость произвольного расширения шаблонов в Gitea и Forgejo Эта работа лицензирована в соответствии с Creative Commons Attribution-ShareAlike 4.0 International License. Краткое описание Проверяя исходный код Forgejo и Gitea, чтобы лучше понять, как выполняется шаблонизация, я обнаружил...

CVE-2026-16172

Netskope was notified of an out-of-bounds heap read affecting the Endpoint DLP EPDLP service of the Netskope Client. A local standard user could potentially send a specially crafted message that is not properly validated with a bounds check, likely crashing the kernel driver handler. Successful...

Arbitrary-File-Read-CVE-2024-24919

任意ファイル読み取り CVE-2024-24919 SIEMで受信したアラートは以下の通りです。 まず、CVE-2024-24919とは何でしょうか？以下はNISTのウェブサイトに掲載されている説明です。 さらに調査を進めると、CVE-2024-24919はパストラバーサル攻撃であり、「/etc/passwd」ディレクトリへのリクエストが行われた理由が説明されます。 「/etc/passwd」ディレクトリには、ユーザーのユーザー名、ユーザーID（UID）、グループID（GID）、ホームディレクトリ、ログインシェルなど、ユーザーアカウント情報が格納されています。...

CVE-2024-24919-Incident-Report.md

🛡️ SOC287 - Checkpoint Security Gateway의 임의 파일 읽기 CVE-2024-24919 날짜: 2024년 6월 6일 조사 유형: 웹 공격 플랫폼: LetsDefend 트리거된 규칙: SOC287 – 임의 파일 읽기 감지됨 CVE: CVE-2024-24919 심각도: 높음 영향: 경로 탐색을 통한 민감한 시스템 파일 무단 접근 📌 요약 2024년 6월 6일, CP-Spark-Gateway-01에서 Check Point Security Gateway에 영향을 미치는 제로데이 임의 파일 읽기 취약점인...

CVE-2026-3055

🔥 NetScalerBleed2: Citrix NetScaler의 치명적인 인증 없이 발생하는 메모리 초과 읽기 CVE-2026-3055 인증되지 않은 범위 밖 메모리 읽기메모리 누수 SAML ID 제공자IdP로 구성된 어플라이언스에서만 발생 📋 개요 CVE-2026-3055 는 Citrix NetScaler ADC 및 NetScaler Gateway 의 치명적인 범위 밖 읽기 취약점CWE-125입니다. 이 취약점은 SAML 처리 중 불충분한 입력 검증 으로 인해 발생합니다. 인증되지 않은 원격 공격자가 메모리 초과 읽기를...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...