CVE-2026-93634

A cross-account authorization vulnerability exists in Zimbra Collaboration Suite (ZCS) versions 10.1.16 and 10.1.20 . The flaw allows an authenticated user to insert forged shared-file records into another user's mailbox via the FileSharedWithMeRequest request. The system fails to validate a corr...

EUVD-2026-108974

A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...

CVE-2026-93634 Zimbra Collaboration Suite Cross-Account Authorization Bypass via Forged Shared-File Records

A cross-account authorization vulnerability in Zimbra Collaboration Suite ZCS allows an authenticated user to insert forged shared-file records into another user's mailbox through FileSharedWithMeRequest. The request bypasses delegated-account authorization and accepts attacker-selected file...

CVE-2026-98974

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974

The Linux kernel contains a vulnerability in the XFS filesystem involving the XFS_IOC_EXCHANGE_RANGE operation's TO_EOF flag. The root cause is that the code incorrectly swaps ondisk and incore file sizes when a nonzero offset is used, leading to incorrect file size reporting. This discrepancy ca...

EUVD-2026-108768

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974 xfs: fix exchange-range-to-eof file size exchange

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974 xfs: fix exchange-range-to-eof file size exchange

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

xwiki__xwiki-commons_CVE-2023-36471_14-10-5

XWiki Commons XWiki Commons are technical libraries common to several other top level XWiki projects. These libraries can be used by projects outside of the XWiki ecosystem, are generic and not related to the wiki domain. XWiki Platform, XWiki Commons and XWiki Rendering are part of the XWiki.org...

CVE-2021-4034

CVE-2021-4034 Precompiled builds for CVE-2021-4034. Of course you shouldn't trust precompiled builds : This release works slightly different: first a minimal shared object is created. This object is packaged into the main binary and dropped upon execution. Musl is used for compilation to minimize...

CVE-2025-1974

CVE-2025-1974: Kubernetes Ingress Nginx Controller Vulnerability Analysis and PoC Environment Setup Test Environment MacOS M2 Ingress NGINX Controller 1.11.3 Rancher Desktop Docker Minikube Kubernetes Local Test Environment Setup M2 MacOS Install minikube for local testing minikube start...

cve-2018-6574

cve-2018-6574 $ gcc -shared -o attack.so -fPIC attack.c...

AgentSmith-HIDS

AgentSmith-HIDS --The name of this project was inspired by the movie - The Matrix English | 简体中文 THIS REPO IS OLD RELEASE VERSION: https://github.com/bytedance/Elkeid About AgentSmith-HIDS Technically, AgentSmith-HIDS is not a Host-based Intrusion Detection System HIDS due to lack of rule engine...

Malware in @grabcad/company-server-shared

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @grabcad/grabcad-shop-shared

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @grabcad/company-server-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 77669bd2c3c9138e7d3ab0612febc058dfd8235eb812a40ffb5bf3f27d19bf47 Package self-describes as a Compatibility shim. for the @grabcad scope and ships no real functionality: index.js exports a Proxy whose property acces...

Malicious code in @grabcad/grabcad-shop-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255034a9e973919c82be7b2f75db934cc8a385c6cb388c6d632769b6ed0889 The package publishes under the @grabcad scope but provides no real functionality: index.js exports a Proxy stub that no-ops every property access, a...

MAL-2026-18215 Malicious code in @grabcad/grabcad-shop-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8b255034a9e973919c82be7b2f75db934cc8a385c6cb388c6d632769b6ed0889 The package publishes under the @grabcad scope but provides no real functionality: index.js exports a Proxy stub that no-ops every property access, a...

Malware in @blueskydataplatform/shared-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

kernel: drm/amdkfd: Add TLB flush after MES queue eviction/suspension

A flaw was found in the Linux kernel's drm/amdkfd component. This vulnerability arises from a race condition where the Micro Engine Scheduler MES fails to perform a necessary Translation Lookaside Buffer TLB invalidation after unmapping queues. This oversight allows in-flight Direct Memory Access...