CVE-2026-25126

CVE-2026-25126：PolarLearn 投票计数操纵 研究： Joshua van Rijswijk 描述 CVE-2026-25126 的概念验证（PoC），这是 PolarLearn 论坛投票 API 中的一个高危业务逻辑漏洞。 端点 POST /api/v1/forum/vote 未能对 direction 字段执行严格的运行时验证。 由于 TypeScript 类型在运行时不会被强制执行，攻击者可以发送任意字符串，而这些字符串会在下游被错误处理。 这允许通过创建所谓的 幽灵反对票 来操纵投票计数。 漏洞 该 API 信任 JSON 请求体而不进行验证：...

[SECURITY] Fedora 43 Update: exiv2-0.28.9-1.fc43

A command line utility to access image metadata, allowing one to: print the Exif metadata of Jpeg images as summary info, interpreted values, or the plain data for each tag print the Iptc metadata of Jpeg images print the Jpeg comment of Jpeg images set, add and delete Exif and Iptc metadata of...

[SECURITY] Fedora 43 Update: gvfs-1.58.4-4.fc43

The gvfs package provides backend implementations for the gio framework in GLib. It includes ftp, sftp, cifs...

[SECURITY] Fedora 43 Update: firefox-155.0-1.fc43

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 43 Update: nss-3.127.0-1.fc43

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

[SECURITY] Fedora 43 Update: freerdp-3.31.0-1.fc43

The xfreerdp & wlfreerdp Remote Desktop Protocol RDP clients from the FreeR DP project. xfreerdp & wlfreerdp can connect to RDP servers such as Microsoft Windows machines, xrdp and VirtualBox...

[SECURITY] Fedora 43 Update: mingw-gstreamer1-plugins-base-1.26.11-2.fc43

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 43 Update: mingw-gstreamer1-plugins-good-1.26.11-3.fc43

GStreamer is a streaming media framework, based on graphs of filters which operate on media data. Applications using this library can do anything from real-time sound processing to playing videos, and just about anything else media-related. Its plugin-based architecture means that new data types ...

[SECURITY] Fedora 43 Update: mingw-expat-2.8.3-1.fc43

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 43 Update: mingw-openexr-3.3.14-1.fc43

MinGW Windows openexr library...

[SECURITY] Fedora 43 Update: proftpd-1.3.9d-2.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

CVE-2026-36981-Kernel-EoP-PoC

CVE-2026-36981-Kernel-EoP-PoC MiniTool 的 pwdrvio.sys 内核驱动中存在内核写-写-何处（write-what-where）条件。演示了一种借助调试器实现的任意内核写入原语，可用于权限提升。 2026-02-09 已通知厂商 2026-03-05 厂商已确认 2026-03-05 已向 MITRE 申请 CVE 2026-05-10 在 90 天协调披露期后公开披露 https://github.com/user-attachments/assets/ac81d7ce-0be7-40a5-9334-c54350e6e30e 任意内核写入 →...

rtl_433

rtl433 rtl433 despite the name is a generic data receiver, mainly for the 433.92 MHz, 868 MHz SRD, 315 MHz, 345 MHz, and 915 MHz ISM bands. The official source code is in the https://github.com/merbanan/rtl433/ repository. See also a list of software that works with rtl433 in the wiki. For more...

CVE-2026-31429-POC

CVE-2026-31429 — Linux 内核：通过 bpfprogtestrunskb 对 KFENCE 分配的 SKB 头部进行跨缓存释放 严重性： 中危（CWE-763：释放无效指针或引用） 发布时间： 2026-04-20 受影响子系统： net/core/skbuff.c — skbkfreehead 研究人员： Antonius / w1sdom — Blue Dragon Security 联系方式： [email protected] Lore 线程：...

CVE-2026-42141-xibo-ssrf

CVE-2026-42141 - XIBO CMS SSRF SSRF vulnerability in Xibo CMS CVE-2026-42141 Description Server-Side Request Forgery SSRF vulnerability in Xibo CMS via the uploadUrl feature. This vulnerability was discovered during security research on Xibo CMS. Impact An authenticated user can force the server ...

InvenTree-Path-Traversal-CVE-2026-33531

CVE-2026-33531 — InvenTree 报告模板中的路径遍历漏洞 公告： GHSA-rhc5-7c3r-c769 CVE： CVE-2026-33531 严重性： 中危 发布时间： 2026-03-20 致谢： @alonaki 描述 报告模板引擎中存在一个路径遍历漏洞，允许具有员工（staff）权限的用户通过精心构造的模板标签读取服务器文件系统上的任意文件。 受影响的函数 位于 src/backend/InvenTree/report/templatetags/report.py： encodesvgimage asset uploadedimage...

copy-fail_LPE_Interactive

CVE-2026-31431 Copy Fail Exploit Linux kernel page cache poisoning exploit tool with support for non-interactive command execution. Vulnerability Overview CVE-2026-31431 is a logic flaw in the Linux kernel, present in the authesn AEAD algorithm implementation. Through the AFALG and splice system...

threat-intel-brief-cve-2026-42208-litellm

威胁情报简报 - CVE-2026-42208：BerriAI LiteLLM SQL 注入 CVE： CVE-2026-42208 GHSA： GHSA-r75f-5x8p-qvmc CVSS 评分： 9.3（严重） 受影响软件： BerriAI LiteLLM 版本 = 1.81.16， 1.83.7 修复版本： 1.83.7-stable（于 2026 年 4 月 19 日发布） CISA KEV 收录日期： 2026 年 5 月 8 日 信息来源： CISA KEV、Sysdig TRT、The Hacker News、Security Affairs 执行摘要 BerriAI ...

CVE-2026-41177-Squidex-CMS

CVE-2026-41177：Squidex CMS 盲SSRF 针对CVE-2026-41177的技术研究与分析：Squidex CMS Restore API中的一个盲服务器端请求伪造（SSRF）漏洞。 漏洞概述 CVE ID： CVE-2026-41177 受影响组件： Squidex API：备份/恢复引擎（/api/apps/restore） 受影响版本： 替换为有效的管理员令牌）： root@kitploit: curl -X POST http://localhost/api/apps/restore/ \ -H 'Authorization: Bearer ' \ -H...

connectwise-automate-AiTM-rce

ConnectWise Automate 中間者攻撃によるリモートコード実行 目次 背景 タイムライン 考察と学び 責任ある開示 PoC コード ConnectWise に提供したレポート 概要 脆弱な構成 影響 技術的詳細 1. HTTP トランスポート 2. 不十分なプロトコルセキュリティ（暗号化と検証の欠如） 2.1 依存関係チェックとダウンロードにおける不十分な検証 2.2 リプレイプロテクションの欠如 2.3 自己アップデートにおける不十分な検証 3. RMM コマンド＆コントロールの乗っ取り 緩和策 背景 ペネトレーションテストの一環として、ConnectWise...