79789 matches found
CentOS Linux 7 [TuxCare] Security Update: flatpak / flatpak-builder / flatpak-devel / flatpak-libs (CENTOS7:CLSA-2026:1792770859)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1792770859 advisory. - A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause...
October 26, 2026—KB5134134 (OS Build 28000.3237) Out-of-band
October 26, 2026—KB5134134 OS Build 28000.3237 Out-of-band Applies To Windows 11 version 26H1, all editions This non-security out-of-band OOB update for Windows 11, version 26H1 KB5134134 is cumulative. It includes updates from previous releases, along with additional non-security improvements. W...
October 26, 2026—KB5134130 (OS Build 22631.7654) Out-of-band
October 26, 2026—KB5134130 OS Build 22631.7654 Out-of-band Applies To Windows 11 version 23H2, all editions This non-security out-of-band OOB update for Windows 11, version 23H2 KB5134130 is cumulative. It includes updates from previous releases, along with additional non-security improvements. W...
ghostlock-firetv-tank
GhostLock — one-shot root for the Fire TV Stick 2 tank Buil...
Exploit for CVE-2026-116106
CVE-2026-116106 — HeyCyan App 1.0.103: controle de acesso inco...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock Manager OnePlus Ace 6T PLR110 – Temporary Root...
cse509-hw2
CSE 509 — Computer System Security, Assignment 2 Coursework f...
Exploit for Race Condition in Sonicwall Sma_6200_Firmware
CVE-2024-6387-how-to-fix Vulnerability remediation and mitiga...
Exploit for Use After Free in Linux Linux_Kernel
Galaxy Tab S10 FE — ADB root CVE-2026-43499 / GhostLock + Ker...
Exploit for OS Command Injection in Fortinet Fortisandbox
Fortinet Critical CVEs 2026 - PoC & Exploits By Gh0st-Bx1 |...
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published the findings this week. The attack requires two things: Tailscale SSH set up to allow port forwarding, and an attacker who already controls...
ALPINE-CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
DEBIAN-CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
DEBIAN-CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
ALPINE-CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116191
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
CVE-2026-116192
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
CVE-2026-116192 rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...