CVE-2026-52806

Gogs RCE — Injection d'argument dans git rebase CWE-88 Exécution de code à distance authentifiée contre Gogs est interprétée par Git comme le drapeau --exec plutôt qu'un argument positionnel, ce qui entraîne l'exécution de sh -c après chaque commit rejoué pendant le rebase. Comment l'exploit...

Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

dyen

dyen dyen carica una dylib Mach-O in memoria usando la Python stock di macOS e chiama un entry point esportato senza dlopen su quella dylib. L'obiettivo è che l'immagine non sia mai un file standalone sul target e non venga mai registrata con dyld. di cenobyte [email protected] 2026...

CVE-2026-74669

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

CVE-2026-74669 ipvs: clear IPv4 options after rebasing tunnel ICMP errors

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

EUVD-2026-64356

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmpsend. However, IPCBskb-opt still describes the outer IPv4...

PT-2026-79674

In the Linux kernel, the following vulnerability has been resolved: ipvs: clear IPv4 options after rebasing tunnel ICMP errors ip vs in icmp rebases an skb from the outer ICMP packet to the quoted original request before passing it to icmp send. However, IPCBskb-opt still describes the outer IPv4...

Linux Distros Unpatched Vulnerability : CVE-2026-74669

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipvs: clear IPv4 options after rebasing tunnel ICMP errors ipvsinicmp rebases an skb from the outer ICMP packet to the quoted original request before passing it...

[SECURITY] Fedora 43 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc43

Full-featured terminal-based sequence editor for Git interactive rebase...

[SECURITY] Fedora 44 Update: rust-git-interactive-rebase-tool-2.4.1-17.fc44

Full-featured terminal-based sequence editor for Git interactive rebase...

php8.4 security, bug fix, and enhancement update

8.4.23-1 - rebase to 8.4.23...

php:8.2 security, bug fix, and enhancement update

libzip php 8.2.32-1 - rebase to 8.2.32 php-pear php-pecl-apcu php-pecl-rrd php-pecl-xdebug3 php-pecl-zip...

SUSE CVE-2026-52806

Gogs is an open source self-hosted Git service. Prior to 0.14.3, Gogs allows authenticated users to achieve Remote Code Execution RCE on the server by creating a pull request with a specially crafted branch name that injects the --exec flag into the git rebase command during the "Rebase before...

nodejs:22 security, bug fix, and enhancement update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

Important: nodejs:22 security, bug fix, and enhancement update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: ip-address: ip-address: Cross-site scripting via improper HTML escaping of untrusted input CVE-2026-42338 undici: undici: Denial of Service due to...

php8.4 security update

8.4.21-2 - rebase to 8.4.21...

php security update

8.3.31-1 - rebase to 8.3.31 - add tmpfiles.d configuration file for ImageMode...

mariadb10.11 security, bug fix, and enhancement update

3:10.11.18-1 - Rebase to 10.11.18 3:10.11.17-1 - Rebase to 10.11.17 3:10.11.16-1 - Rebase to 10.11.16...

Security update for gnutls

This update for gnutls fixes the following issue Rebase the CVE-2026-42014 patch to include a missing call to p11kiturifree in gnutlspkcs11tokensetpin bsc1263713. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...