vim security update

8.0.1763-32.0.1 - Remove upstream references Orabug: 31197557 - Added glibc-gconv-extra to common requires to provide ISO-8859-2 Orabug: 34114984 2:8.0.1763-32 - RHEL-271024 vim: vim: Ex command injection via crafted filename in signjump 2:8.0.1763-32 - RHEL-257017 CVE-2026-73073 arbitrary Ex...

RHEL 8 : kernel (RHSA-2026:77216)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:77216 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ALSA: firewire-motu: fix buff...

Oracle Linux 8 / 9 : Unbreakable Enterprise kernel (ELSA-2026-500377)

The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500377 advisory. - tcp: fix potential race in tcpv6synrecvsock Eric Dumazet Orabug: 39331624 CVE-2026-43198 - RDMA/rxe: Fix TOCTOU heap overflow in getsrqwqe Bjoe...

CVE-2025-57231

CVE-2025-57231 - Docmost 0.22.0 - 任意ファイル読み取り このリポジトリには、CVE-2025-57231 の概念実証PoCエクスプロイトが含まれています。 免責事項 このプロジェクトは教育目的および許可されたセキュリティテストのみを目的として提供されています。所有していないシステム、またはテストの許可を得ていないシステムに対して使用しないでください。 概要 Docmost のディレクトリトラバーサル脆弱性により、バージョン 0.2.1 から 0.21.0 までの任意ファイル読み取りが可能です。アプリケーションの...

CVE-2026-106304

An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553124799...

CVE-2022-44268-

CVE-2022-44268- HTB 연습용 사용 방법 python3 poc.py generate -o test.png -r /etc/passwd test.png 파일을 업로드하고 다운로드하세요 python3 poc.py parse -i out.png...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

Research on Vivo iQOO Neo 9 Rooting CVE-2025-21479 This pro...

CVE-2026-65122

NVIDIA TensorRT contains a vulnerability where an attacker can cause an out of bounds read. A successful exploit of this vulnerability may lead to denial of service...

CVE-2026-106507

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2021-43798

usage: grafana-exploit.py -h -H/--host HOST grafana-exploit.py: error: the following arguments are required: -H/--host 例: python3 grafana-exploit.py --host 任意ファイルの読み取りに成功した場合、 リクエストURLとcurlコマンドを表示します +RequestURL...

CVE-2019-19204

CVE-2019-19204 Oniguruma 6.x6.9.4rc2 이전 버전에서 문제가 발견되었습니다. regparse.c의 fetchintervalquantifier이전 명칭: fetchrangequantifier 함수에서 PFETCH가 PEND를 확인하지 않고 호출됩니다. 이로 인해 힙 기반 버퍼 오버리드heap-based buffer over-read가 발생합니다. 연구자: The Tarantula Team, VinCSSVingroup 계열의 ManhND Oniguruma란? Oniguruma는 K. Kosako가 개발한...

CVE-2024-57784

CVE-2024-57784 Exploit Title: Authenticated Directory Traversal Vulnerability on Zenitel AlphaWeb XE Version 11.2.3.10 Date: 08/02/2025 Exploit Author: Safvan Parakkal Vendor Website: https://www.zenitel.com/ CVE: CVE-2024-57784 usage: CVE-2024-57784.py -h -u URL -f FILE optional arguments: -h,...

CVE-2026-106507 Backstage: TechDocs arbitrary file read via mkdocs snippets

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2026-106507 Backstage: TechDocs arbitrary file read via mkdocs snippets

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

EUVD-2026-94072

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2026-106507

The Backstage framework is vulnerable to an arbitrary file read via mkdocs snippets in the @backstage/plugin-techdocs-node package prior to version 1.15.4 . The root cause is unsafe path resolution during TechDocs source tree handling, which allows an authenticated user capable of registering doc...

CVE-2026-106507 Backstage: TechDocs arbitrary file read via mkdocs snippets

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

DEBIAN-CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

AZL-106676 CVE-2026-19029 affecting package hdf5 1.14.6-4

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...