CVE-2026-21807 HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow

HCL BigFix Quantum Risk Analyzer binary lacks several critical, industry-standard hardening protections that could allow an attacker to cause a stack-based buffer overflow...

CVE-2026-21807

HCL BigFix Quantum Risk Analyzer is affected by a vulnerability in its binary, which lacks several critical, industry-standard hardening protections. This absence could allow an attacker to cause a stack-based buffer overflow , potentially leading to crashes or arbitrary code execution. Affected ...

yalu102

yalu102 Un jailbreak iOS "work in progress" per dispositivi a 64 bit creato da qwertyoruiopz e marcograssi. Per favore utilizza la scheda "Issues" solo per problemi relativi al codice. Se hai bisogno di supporto, cerca su /r/jailbreak prima di pubblicare una domanda lì. Dispositivi supportati e...

CVE-2019-15233

CVE-2019-15233 FAB-2019-00157 Vulnerabilità scoperta da me CVE-2019-15233 Avviso: advisory Informazioni di Base root@kitploit: Advisory ID: FAB-2019-00157 Product: Live Input Macros Manufacturer: Old Street Solutions Affected Versions: 2.10 and before Tested Versions: 2.10 Vulnerability Type:...

CVE-2026-54548 kas: Persistent SSH Host Key Checking Disablement

kas is a setup tool for bitbake based projects. Prior to 5.4, internal SSH key setup triggered by SSHPRIVATEKEY or SSHPRIVATEKEYFILE creates /.ssh/config when no user-specific SSH configuration exists and adds a global Host rule containing StrictHostKeyChecking no. In kas/libcmds.py,...

Vulnerability-Risk-Assessment-TVRA-Enterprise-Network

لا يحتوي هذا المستودع على ملف README...

PT-2026-82329

Name of the Vulnerable Software and Affected Versions HCL BigFix Quantum Risk Analyzer affected versions not specified Description The binary lacks several critical, industry-standard hardening protections, which could allow an attacker to cause a stack-based buffer overflow. A stack-based buffer...

Exploit-Mapper

Exploit Mapper Eine umfassende Plattform zur Verwaltung von Schwachstellen, die Sicherheits-Scan-Berichte analysiert, Schwachstellendaten mit Exploit-Informationen anreichert und umsetzbare Risikobewertungen für eine priorisierte Behebung bietet. Funktionen Multi-Format-Import : Unterstützung für...

zeek-quic

Analizzatore/rilevatore QUIC di Google per Zeek Questo analizzatore può eseguire il parsing e il rilevamento dell'implementazione Google di QUIC chiamata GQUIC qui per semplicità, utilizzando il formato wire descritto al seguente indirizzo: https://www.chromium.org/quic. La versione di GQUIC...

vulnseeker

🔍 VulnSeeker Smart CVE search with exploitability context a...

Adobe ColdFusion - Unrestricted File Upload Remote Code Execution

Adobe ColdFusion versions July 12 release 2018.0.0.310739, Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. Successful exploitation could lead to arbitrary code execution. id: CVE-2018-15961 info: name: Adobe ColdFusion - Unrestricted File Upload...

csaf

The Cyber Security Awareness Framework CSAF is a structured approach aimed at enhancing cybersecurity awareness and understanding among individuals, organizations, and communities. It provides guidance for the development of effective cybersecurity awareness programs, covering key areas such as...

Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle. Mor...

AppEngine vulnerability affects SICK ICR890-4 and SICK InspectorP6xx devices

Multiple internal virtual filesystem paths are unintentionally accessible remotely in the SICK ICR890-4 and SICK InspectorP6xx devices. If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the device...

Malicious code in dext-crate-video (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3becb032c5eb2c6055f81b9fc5dbd5d5c517d1c4028810110bd1b202ec4742e5 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Astra Linux – Vulnerability in Redis

Redis is an in-memory database that persists data on disk. Upon startup, Redis begins listening on Unix sockets before adjusting its permissions according to the user-provided configuration. If a permissive umask value is used, this can create a race condition that allows another process to...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Drop the channel lock before queuing buffers. Ensure that read and write locks for the channel are not acquired consecutively by dropping the read lock from parsexferevent. This allows a callback provided to the...

Astra Linux – Vulnerability in openjpeg2

A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...

Astra Linux – Vulnerability in cups

OpenPrinting CUPS is an open-source printing system for Linux and other Unix-like operating systems. In versions 2.4.8 and earlier, when starting the cupsd server with a Listen configuration item pointing to a symbolic link, the cupsd process could perform arbitrary chmod operations on the target...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: mctp: Route lookups now perform under a RCU read-side lock. Our current route lookups mctproutelookup and mctproutelookupnull traverse the network’s route list without holding the RCU read lock. This means that the route lookups...