CVE-2025-61777

CVE-2025-61777 1. Несанкционированная модификация шаблонов значков на FlagforgeCTF CVE-2025-61777 Краткое описание Приложение Flagforge https://flagforge.xyz раскрывает критические уязвимости в своих административных API-эндпоинтах, а именно /api/admin/badge-templates GET и...

copy_fail

Copy Fail — CVE-2026-31431 CVE-2026-31431Copy Fail은 Linux 커널의 algifaead 모듈AFALG 서브시스템에 존재하는 로컬 권한 상승 취약점입니다. 2017년 8월에 도입된 로직 결함으로 인해, 권한이 없는 로컬 사용자가 AFALG + splice를 통해 읽기 가능한 임의 파일의 페이지 캐시에 4바이트의 제어된 데이터를 쓸 수 있으며, 이후 변조된 setuid 바이너리를 실행하여 root 권한을 획득할 수 있습니다. 이 익스플로잇은 결정적deterministic입니다 — 경쟁...

kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath

A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-553_109_1, kpatch-patch-4_18_0-553_125_1, kpatch-patch-4_18_0-553_53_1, kpatch-patch-4_18_0-553_72_1, and kpatch-patch-4_18_0-553_85_1 security update

An update for multiple packages is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

matano

Lac de données de sécurité open source pour AWS Matano Open Source Security data lake est un lac de données de sécurité natif cloud open source, conçu pour les équipes de sécurité sur AWS...

matano

Open source security data lake for AWS Matano Open Source Security data lake is an open source cloud-native security data lake , built for security teams on AWS...

GHSA-QXC2-J82W-R537 Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

EUVD-2026-56923

Faker: helpers.fake exploitable into arbritary code execution...

Faker: helpers.fake exploitable into arbritary code execution

Summary faker.helpers.fake can be tricked into arbritary code execution. Details fakeEval.resolveProperty resolves properties on functions itself instead of resolving the nested function first. This can be addressed by recursively calling resolveProperty instead of accessing the property after on...

CVE-2026-79990 GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete

Craft CMS GraphQL entry mutation resolvers saveEntry, deleteEntry read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments, which is the function that enforces site-scope filtering via arrayintersect against the GraphQL schema’s allowed sites. The query path...

EUVD-2026-70048

Craft CMS GraphQL entry mutation resolvers saveEntry, deleteEntry read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments, which is the function that enforces site-scope filtering via arrayintersect against the GraphQL schema’s allowed sites. The query path...

CVE-2026-79990

Craft CMS GraphQL entry mutation resolvers (saveEntry, deleteEntry) read siteId directly from $arguments without passing through ArgumentManager::prepareArguments(), which normally enforces site-scope filtering. As a result, an attacker with a GraphQL token scoped to one site can create, modify, ...

CVE-2026-79990 GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete

Craft CMS GraphQL entry mutation resolvers saveEntry, deleteEntry read siteIddirectly from$argumentswithout passing throughArgumentManagerprepareArguments, which is the function that enforces site-scope filtering via arrayintersect against the GraphQL schema’s allowed sites. The query path...

ipsw

ipsw iOS/macOS Research Swiss Army Knife What is ipsw 🤔 ipsw is a comprehensive command-line research framework for iOS and macOS. It provides an extensive toolkit for security researchers, reverse engineers, jailbreak developers, and iOS enthusiasts to download, parse, and analyze Apple firmware...

CVE-2025-39247

CVE-2025-39247 Цель: HikCentral Professional HCMP, центральный сервер VMS CVE: CVE-2025-39247 — Уязвимость контроля доступа CVSS 3.1: 8.6 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N Затрагиваемые версии: V2.3.1 – V2.6.2 и V3.0.0 Исправлено в: V2.6.3 / V3.0.1 / Fix-Pack CVE-2025-39247 Раскрыто: 2025-08-28...

Dorkify

Perform Google Dork search with Dorkify Google Dorking Google dorking is a hacker technique that uses Google Search to find security holes in the configuration and computer code that websites use. Google Dorking involves using advanced operators in the Google search engine to locate specific...

deny-af-alg-bpf

deny-af-alg-bpf 설명 AFALGLinux 커널 암호화 API 소켓 생성을 차단하고 모든 시도를 링 버퍼를 통해 사용자 공간에 기록하는 BPF LSM 프로그램입니다. 기능 lsm/socketcreate 훅에 연결 socketAFALG, ... 호출을 -EPERM으로 거부 구조화된 이벤트pid, comm를 BPF 링 버퍼로 전송 사용자 공간 데몬이 링 버퍼를 읽고 stderr에 기록systemd 저널에서 수집 구성 요소 프로그램 denyafalg.bpf.c - 주요 차단 로직, BPF커널 공간에서 동작...

CLSA-2026-1788358728 TuxCare security update for com.fasterxml.jackson.core:jackson-databind (6 CVEs)

TuxCare rebuilt com.fasterxml.jackson.core:jackson-databind to address 6 CVEs. Fixed in 2.14.1-tuxcare.1...

EUVD-2026-42744

Siyuan: Authenticated path traversal in /snippets/ static handler serveSnippets leaks conf/conf.json secrets and siyuan.db...

Siyuan: Authenticated path traversal in /snippets/ static handler (serveSnippets) leaks conf/conf.json secrets and siyuan.db

Reporter: Cavan Loughran, Celvex Group Inc. Summary ------- The /snippets/filepath route handler serveSnippets in kernel/server/serve.go performs a bare filepath.Joinutil.SnippetsPath, filePath on the single-decoded c.Request.URL.Path and serves the result with c.File, with NO IsSubPath containme...