RLSA-2026:65816 Important: qt6-qt5compat security update

Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE pages listed i...

qt6-qt5compat security update

An update is available for qt6-qt5compat. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt6 - Qt 5 Compatibility Libraries. Security Fixes: qt: Qt: Denial of...

weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

GHSA-JF6Q-CHMF-3H3V weasyprint Has Server-Side Request Forgery (SSRF)

Summary urlfetcher is WeasyPrint's documented mechanism for restricting resource loading - applications use it to block file://, internal hosts, etc. when rendering untrusted input. Two writepdf channels ignore the document's urlfetcher and build a fresh default URLFetcher instead. A restrictive...

CVE-2026-65343

CVE-2026-65343 — Lectura fuera de límites en AppleKeyStore derrota de KASLR Componente: extensión del kernel AppleKeyStore — LibSerSEPControlDeserialize Afectados: iOS / iPadOS 26.6 23G71 y anteriores Corregido en: iOS / iPadOS 26.6.1 23G83 Tipo: lectura fuera de límites en la deserialización de...

CVE-2026-7020

CVE-2026-7020 Lectura arbitraria de archivos en Ollama mediante path traversal en el digest de tensores. Exfiltra claves de host SSH y cualquier otro archivo de un host Ollama accesible en tres llamadas API no autenticadas. Informe: Co-Investigador @gouldnicholas Uso root@kitploit: python3 poc.py...

CVE-2016-5195

记录仅以学习为目的，禁止用于非法用途 原理 该漏洞的原理是依靠并发刷写脏页，使原本只读权限的文件内容发生变更 如果被修改的文件为root所属且具备SUID权限，那么就可以利用其进行提权 影响范围 在2016年10月前被编译的且版本在2.6.22 到 4.8.3之间的内核，因为2016年10月后的大概率被打补丁了 务必是Ext文件系统，如果是XFS文件系统，就会触发xfs只读页断言，而后系统重启，变成DDos攻击了 工具代码（dirtycowfilepayload.c） root@kitploit: include include include include include inclu...

CVE-2023-26563-26564-26565

El proveedor ha reportado que todas las vulnerabilidades detalladas han sido corregidas a partir de las versiones lanzadas después de 2024. Ruptura InfoSecurity no ha verificado que estas correcciones sean completas. Consulte los comentarios del proveedor en...

CVE-2025-58360-GeoServer-XXE

CVE-2025-58360：GeoServer XXE 实验环境 GeoServer OWS/WMS 服务中未经身份验证的 XML 外部实体 XXE 注入漏洞 CVSS: 9.8 严重 受影响版本: SLDHandler.parse | | - SLDParser.parseSLD | 文件泄露/SSRF 快速开始 root@kitploit: 启动易受攻击和已修复的两个实例 docker-compose up -d 易受攻击实例: http://localhost:8080/geoserver 已修复实例: http://localhost:8081/geoserver 等待约 60...

CVE-2026-54420-LiteSpeed-Symlink-Exploit

CVE-2026-54420 - LiteSpeed cPanel 插件符号链接权限提升 ⚠️ 警告 此代码仅用于教育目的和授权的安全测试。 未经明确许可对系统进行未授权使用是违法的。 📋 描述 CVE-2026-54420 是 LiteSpeed 用于 cPanel（版本 2.4.8）和 WHM（版本 5.3.2.0）的插件中的一个符号链接（symlink）权限提升 漏洞。在使用 CloudLinux/CageFS 的共享托管服务器上，拥有 FTP 或 web shell 访问权限的用户可以创建恶意符号链接，以读取其分配目录之外的文件，包括： /etc/passwd,...

DEBIAN-CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-87875

The cupsUTF32ToUTF8 function in CUPS's cups/transcode.c lacks a source-length bound and can read past the end of the source buffer, resulting in a heap out-of-bounds read. This is reachable via SNMP supply-description parsing in backend/snmp-supplies.c with attacker-controlled content...

CVE-2026-85788

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit

= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X RECONSTRUCTIONANALYSIS CVE-2026-21858: Ni8mare - Explotación de Cadena Completa RCE en n8n 1. Resumen Ejecutivo y Visión General Este documento presenta un análisis técnico determinista de reconstrucción de la vulnerabilidad...

EUVD-2026-75104

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

CVE-2026-85788

CVE-2026-85788 affects the mutable SQL detector component in Amazon awslabs mysql-mcp-server . An incomplete list of disallowed inputs allows context-dependent actors to bypass the read-only enforcement gate by crafting SQL inline comments that the regex engine does not treat as whitespace, reach...

CVE-2026-85788 Incomplete list of disallowed inputs in awslabs mysql-mcp-server

Incomplete list of disallowed inputs in the mutable SQL detector component in Amazon awslabs mysql-mcp-server might allow context-dependent actors to bypass the read-only enforcement gate and reach file-read and file-write SQL sinks via SQL inline comments that the regex engine does not treat as...

CVE-2026-50181

CVE-2026-50181 Langroid 文件工具中的路径遍历漏洞允许在配置的当前目录之外进行读/写操作。 主要公告： GHSA-fg23-3346-88f5 GitHub 漏洞数据库： github.com/advisories/GHSA-fg23-3346-88f5 研究人员致谢： @chaitanyagarware 概览 字段| 值 ---|--- CVE| CVE-2026-50181 GHSA| GHSA-fg23-3346-88f5 项目| langroid/langroid 包| langroid 生态系统| pip 严重性| 高 CVSS|...

CVE-2026-34070

Encontré un Bug de Path Traversal en LangChain Que Podría Filtrar Tus Credenciales en la Nube Cómo una API heredada olvidada en uno de los frameworks de IA más populares expuso silenciosamente millones de aplicaciones a lecturas arbitrarias de archivos. Hay una sensación particular que sientes...

CVE-2026-22590

eprosima Fast DDS is a C++ implementation of the DDS Data Distribution Service standard of the OMG Object Management Group. Versions prior to 2.6.12, 2.14.6, 3.2.4, 3.3.1, and 3.4.2 have a remotely triggerable Out-of-Bounds Read while processing RTPS DATAFRAG submessages. An attacker can craft a...