79762 matches found
CVE-2026-33924
Two OS command injection vulnerabilities exist in the Guardian/CMC update installation functionality, affecting versions before 26.4.0 . The root cause is the insufficient validation of update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle ...
CVE-2026-33924 Authenticated RCE in update functionality in Guardian/CMC before 26.4.0
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
EUVD-2026-112724
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when installed, causes arbitrary commands to...
CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
EUVD-2026-112723
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2026-33923 Update bundle signature bypass in Guardian/CMC before 26.4.0
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes signature verification but runs an unsign...
CVE-2026-33923
A signature verification vulnerability exists in the update installation functionality of Guardian/CMC prior to version 26.4.0 . The root cause is the inconsistent validation of update bundle contents, allowing an attacker with administrative privileges to remotely supply a crafted bundle. While ...
ROOT-APP-NPM-CVE-2026-111759 CVE-2026-111759 in markdown-it - Patched by Root
Root has patched CVE-2026-111759 in the markdown-it package for Root:npm. Multiple fixed versions available...
CVE-2026-41940-cPanel-Auth-Bypass-Exploit
CVE-2026-41940: cPanel/WHM Authentication Bypass Analysis Vulnerability Overview CVE-2026-41940 is a critical authentication bypass vulnerability in cPanel & WHM affecting all currently supported versions. It allows an unauthenticated attacker to bypass authentication and gain root-level access W...
ROOT-APP-GOBINARY-CVE-2026-56864 CVE-2026-56864 in golang.org/x/mod - Patched by Root
Root has patched CVE-2026-56864 in the golang.org/x/mod package for Root:Go. Multiple fixed versions available...
ROOT-APP-GOBINARY-CVE-2026-39883 CVE-2026-39883 in go.opentelemetry.io/otel/sdk - Patched by Root
Root has patched CVE-2026-39883 in the go.opentelemetry.io/otel/sdk package for Root:Go. Multiple fixed versions available...
OESA-2026-4571 flatpak security update
flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. Security Fixes: In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data...
OESA-2026-4569 flatpak security update
flatpak is a system for building, distributing and running sandboxed desktop applications on Linux. See https://wiki.gnome.org/Projects/SandboxedApps for more information. Security Fixes: In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data...
BIT-RCLONE-2026-116192 rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing named remote via --rc-serve. Attackers can make HEAD/GET requests to...
BIT-RCLONE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...
BIT-OPENBAO-2026-115357 OpenBao before 2.6.4 and 2.7.0 before 2.7.1 Improper Audit Logging of Root Generation and Rekey Responses
OpenBao before 2.6.4 and 2.7.x before 2.7.1 fails to write response audit entries for the unauthenticated sys/generate-root, sys/rekey, and sys/rekey-recovery-key endpoints when request audit logging succeeds but response audit logging fails. An attacker using these endpoints can complete root...
ArpCut
ArpCut An ARP spoofing-based LAN disconnection tool requires Root. Continuously sends forged ARP replies to LAN devices to cut off their network connections, and provides device identification, notes, whitelist, and operation records. Project Homepage Feature Overview LAN device scanning root sca...
cve-2010-3847
CVE-2010-3847 script Meant to automate the exploit discussed in http://marc.info/?l=full-disclosure&m=128776663124692&w=2. Tested on CentOS 5 x86. The DSO it outputs is compiled from the following code: include include include void attributeconstructor init setuid0; system"/bin/bash"; Usage...