Lucene search
+L

83419 matches found

AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtlwifi – significantly reduced the attempts to read efuse in case of failures. Syzkaller reported a hung task with ueventshow on the stack trace. That specific issue was addressed by another commit 0. However, even with th...

5.5CVSS5.9AI score0.0024EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.2 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: kcsan: Turning reportfilterlistlock into a rawspinlock Ran Xiaokai reported that with a KCSAN-enabled PREEMPTRT kernel, we can observe such issues as follows: | BUG: Sleeping function called from invalid context at...

5.5CVSS6AI score0.00222EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ubifs: Authentication: Fixed a use-after-free in ubifstncendcommit. After an insertion in TNC, the tree may split, causing a node to change its znode-parent. Further deletions of other nodes in the tree which could also free thos...

7.8CVSS7AI score0.00322EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.6 views

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: iwlwifi: mvm – Do not read beyond the mfuart notification. In the event that the firmware sends a notification claiming to have more data than it actually does, we will read beyond the allocated space for the notification. ...

8.1CVSS6.1AI score0.004EPSS
SaveExploits0References2
Circl
Circl
added 2026/08/24 8:45 a.m.28 views

CVE-2026-69665

creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:28+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 08:44:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ca4jtmqur4f7n...

8.5CVSS7.5AI score0.00161EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/24 1:16 a.m.12 views

CVE-2026-78204

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS0.00223EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/24 1:16 a.m.14 views

CVE-2026-78203

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...

7.1CVSS0.0027EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/24 12:30 a.m.58 views

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS0.00223EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/24 12:30 a.m.22 views

CVE-2026-78204

Ghostwriter through version 7.2.6 is missing per-object authorization on its report template lint endpoints . The underlying cause is that RoleBasedAccessControlMixin.test_func only checks request.user.is_active unless a view explicitly overrides it, and neither the lint endpoint nor the stored-l...

5.4CVSS5.6AI score0.00223EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/24 12:30 a.m.12 views

EUVD-2026-64679

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.4CVSS5.7AI score0.00223EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/24 12:30 a.m.15 views

CVE-2026-78204 Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints

Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.testfunc returns only request.user.isactive unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored...

5.3CVSS5.8AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/24 12:30 a.m.59 views

CVE-2026-78203 Ghostwriter before 7.1.2 Cross-Client Report Template Disclosure via Unauthorized Template Swap

Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then...

7.1CVSS0.0027EPSS
SaveExploits0References5
CVE
CVE
added 2026/08/24 12:30 a.m.25 views

CVE-2026-78203

Ghostwriter before 7.1.2 contains a cross-client authorization flaw in the report template swap endpoint . The endpoint fails to validate template ownership, and because template primary keys are sequential, an authenticated attacker can enumerate and attach templates belonging to other clients t...

7.1CVSS5.3AI score0.0027EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/08/24 12:00 a.m.23 views

PT-2026-80993

A stored OS command injection vulnerability exists in the parent-control module of TP-Link Archer BE3600 V1. An authenticated adjacent attacker with administrative access may store a crafted profile name containing shell metacharacters, which is later processed unsafely during daily cloud report...

8.5CVSS5.8AI score0.00962EPSS
SaveExploits0References5
Kitploit
Kitploit
added 2026/08/23 9:18 p.m.11 views

papa

Papa, l'analizzatore WireShark - PRO Uso: Inserisci il tuo file .pcapng nella directory di papa root@kitploit: python .\papa.py python3 .\papa.py Controlla il tuo report HTML...

5.2AI score
SaveExploits0
Circl
Circl
added 2026/08/23 5:00 p.m.17 views

CVE-2026-66917

creationtimestamp| type| source ---|---|--- 2026-08-23 17:00:03+00:00| seen| https://t.me/GithubRedTeam/99370 2026-08-24 00:00:07+00:00| seen| https://t.me/GithubRedTeam/99370 2026-08-24 21:00:04+00:00| seen| Telegram/SUyvNys0dzEwjXvrLl9vzt4eSnd4PMMSmFi1zAltVWOpQ 2026-08-24 21:00:05+00:00| seen|...

8.6CVSS4.7AI score0.00466EPSS
SaveExploits1References1
Circl
Circl
added 2026/08/22 9:00 p.m.19 views

CVE-2019-1235

creationtimestamp| type| source ---|---|--- 2026-08-22 21:00:05+00:00| seen| https://t.me/nuancesprognews/560 2026-08-23 00:00:13+00:00| seen| https://t.me/nuancesprognews/560...

7.8CVSS6.4AI score0.00619EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/22 6:35 p.m.20 views

CVE-2026-75870

creationtimestamp| type| source ---|---|--- 2026-08-22 18:35:27+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/63qno7kptuotr...

9.1CVSS4.7AI score0.00491EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/22 5:20 a.m.20 views

CVE-2026-77068

creationtimestamp| type| source ---|---|--- 2026-08-22 05:20:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtnjnv52532y...

8.8CVSS4.8AI score0.00579EPSS
SaveExploits0References1
Circl
Circl
added 2026/08/22 1:13 a.m.25 views

CVE-2026-53525

creationtimestamp| type| source ---|---|--- 2026-08-22 01:13:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mtn3uaac5i2x 2026-08-22 01:13:25+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117136503782177429...

7.4CVSS4.7AI score0.00254EPSS
SaveExploits0References2
Rows per page
Query Builder