124 matches found
ROOT-OS-UBUNTU-2404-CVE-2026-43015 CVE-2026-43015 in linux - Patched by Root
Root has patched CVE-2026-43015 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2025-38482 CVE-2025-38482 in linux - Patched by Root
Root has patched CVE-2025-38482 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-UBUNTU-2204-CVE-2024-53177 CVE-2024-53177 in linux - Patched by Root
Root has patched CVE-2024-53177 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2024-56611 CVE-2024-56611 in linux - Patched by Root
Root has patched CVE-2024-56611 in the linux package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2022-49579 CVE-2022-49579 in linux - Patched by Root
Root has patched CVE-2022-49579 in the linux package for Root:Debian:11. Multiple fixed versions available...
RLSA-2026:38493 Important: buildah security update
The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a working container, either from scratch or using an image as a starting point; Create an image, either from a working container or using the instructions in a...
Important: Red Hat Security Advisory: podman security update
An update for podman is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
golang: Go os.Root: Symlink following vulnerability allows directory traversal
A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...
golang: Go os.Root: Symlink following vulnerability allows directory traversal
A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...
PT-2026-49558
Name of the Vulnerable Software and Affected Versions DOMPurify versions prior to 3.4.6 Description When using DOMPurify.sanitizeroot, IN PLACE: true with a element as the root, an attacker can bypass attribute sanitization. This occurs if a descendant element has a name attribute that clobbers...
CVE-2026-34580
Botan is a C++ cryptography library. In 3.11.0, the function CertificateStore::certificateknown had a misleading name; it would return true if any certificate in the store had a DN and subject key identifier, if set matching that of the argument. It did not check that the cert it found and the ce...
CVE-2026-23741
CVE-2026-23741 affects Asterisk prior to specific patched versions (20.7-cert9, 20.18.2, 21.12.1, 22.8.2, 23.2.2). The ast_coredumper script runs as root and sources /etc/asterisk/ast_debug_tools.conf, which is located in a folder writable by the asterisk user:group. Because the file is sourced w...
CVE-2026-24812
CVE-2026-24812 affects the project “root” (root-project) with the vulnerability located in builtins/zlib/inftrees.c. The underlying issue is an improper pointer arithmetic in that source file, leading to impact on the root component up to version 6.36.00-rc1. The CVSS data provided (v4.0, base sc...
PT-2025-49392
New HTB video up - Editor machine Chained CVE-2024-24893 for the foothold and CVE-2024-32019 to get root. https://t.co/z1zRLuMttt commands: https://t.co/zZEPDE8xg0 HackTheBox OSCP pentesting editor https://t.co/opAGaJ4Evv...
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for artificial intelligence DGX Spark allows a attacker to execute arbitrary code, cause system failures, or gain unauthorized access to protected information.
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for DGX Spark AI systems is related to an unvalidated return value, which leads to the dereferencing of a zero pointer. Exploiting this vulnerability could allow an attacker to execute arbitrary code, cause service failures, o...
The vulnerability of the SROOT component in NVIDIA’s DGX OS workstation operating system for DGX Spark artificial intelligence systems allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, replace data, cause system failures, or increase their privileges.
The vulnerability of the SROOT component in NVIDIA DGX OS workstations for AI systems, such as DGX Spark, is related to deficiencies in access control. Exploiting this vulnerability allows attackers to execute arbitrary code, gain unauthorized access to protected information, replace data, cause...
Kingo ROOT 安全漏洞
Kingo ROOT is a tool from Kingo ROOT for gaining superuser privileges on Android. A security vulnerability exists in Kingo ROOT version 1.5.8.3353, which stems from unquoted service paths and could lead to elevated privileges...
EUVD-2020-21918
Malware in sbrugna...