8189 matches found
Rocky Linux 10.0 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2025_8196)
The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20258196 advisory. thunderbird: JavaScript Execution via Spoofed PDF Attachment and file:/// Link CVE-2025-3909 thunderbird: Sender Spoofing via Malformed From Header in...
Security Bulletin: Vulnerabilities in Netty,jackson-databind,Angular,bootstrap,React Router,decode-uri-component,Reactor Netty,Spring WebFlux,Spring Framework,spring-web might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty, jackson-databind, Angular, bootstrap, React Router, decode-uri-component, Reactor Netty, Spring WebFlux, Spring Framework,spring-web. Vulnerabilities include allowing the renamed JSON key to be assigned...
qemu
QEMU README QEMU는 범용 오픈 소스 머신 및 사용자 공간 에뮬레이터이자 가상화기입니다. QEMU는 하드웨어 가상화 지원 없이도 소프트웨어만으로 완전한 머신을 에뮬레이트할 수 있습니다. 동적 번역을 사용하여 매우 좋은 성능을 제공합니다. 또한 Xen 및 KVM 하이퍼바이저와 통합하여 에뮬레이트된 하드웨어를 제공하면서 하이퍼바이저가 CPU를 관리하도록 할 수 있습니다. 하이퍼바이저 지원을 통해 QEMU는 CPU에 대해 네이티브에 가까운 성능을 달성할 수 있습니다. QEMU가 CPU를 직접 에뮬레이트할 때는 한 머신예:...
CVE-2026-47567
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...
EUVD-2026-90176
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...
CVE-2026-47567
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer, where a user could cause uncontrolled resource consumption by exhausting the DRM VMA offset address space. A successful exploit of this vulnerability might lead to denial of service...
Backdoor Purification for LoRA-Tuned LLMs Via Null-Space Projection
With the rapid adoption of large language models LLMs and parameter-efficient fine-tuning PEFT methods, the risk of backdoor attacks has become more severe. Existing backdoor purification methods typically rely on at least one of the strong assumptions, such as prior knowledge of triggers, access...
DeBERTa-ConPara: Attack-Aware and Deployment-Realistic Detection of AI-Generated Text
Robust detection of AI-generated text under deployment conditions is challenging: distribution shifts across domains and generators, adversarial perturbations of the input surface, and the absence of target-domain labels for threshold calibration all degrade detectors that perform well in-domain...
CVE-2026-97549
A flaw was found in the Linux kernel's XFS file system. An incorrect block calculation during the online repair of shortform directories and extended attributes causes transaction space to be under-reserved. A local user capable of triggering metadata repair operations can exploit this flaw to...
agent
Bomfather Agent Bomfather Agentは、カーネル空間で動作し、ポリシーに基づいてアクションをブロックするeBPFベースのエージェントです。 私たちは、既存のソリューションで抱えていた問題を解決するためにこのエージェントを開発しました。 1. セットアップと使用が複雑すぎた。 2. 遅く、非効率だった。 3. そして、たとえセットアップが簡単であっても、セキュリティが不十分であったり、さまざまなユースケースに対応できるだけの柔軟性がなかった。 これらの点は、このプロジェクト全体を通じた私たちの北極星です。すべての機能と開発は、これらの点を満たすことを目的としていま...
CVE-2018-8065
Flexense HTTP Server Server-Enable web server on port를 통해 웹 서버를 활성화해야 합니다. 이 모듈은 syncbrs.exe 메모리 영역에서 사용자 공간 쓰기 액세스 위반을 유발합니다. 서버를 충돌시키는 데 필요한 요청 수는 OS 버전과 시스템 메모리에 따라 2001000 사이에서 변동합니다. Sync Breeze Enterprise 10.6.24 버전이 취약한 것으로 보고되었습니다. Exploit MSF Module PYTHON...
CVE-2020-1611
Juniper Junos Space 19.4R1 이전 버전의 로컬 파일 포함 취약점 CVE-2020-1611 PoC Juniper Junos Space 19.4R1 이전 버전은 로컬 파일 포함 취약점에 취약합니다. 일반 사용자 권한을 가진 공격자가 이 취약점을 악용할 수 있습니다. "보고서 다운로드Download Report" 기능이 취약합니다. 기본 점수: 6.5 벡터: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 링크:...
CACredDecoder
C-Ark 資格情報デコーダ CVE-2021-31796 のエクスプロイトツール C-Ark 資格情報ファイルを復号するツール 作成者: Aaron Mizrachi - https://twitter.com/unmanarc/ Enrique Vaamonde - https://twitter.com/ejvm 初回リリース: 2/Sep/2019 公開: 11/Oct/2021 参考文献...
Klog Server <=2.41 - Unauthenticated Command Injection
Klog Server 2.4.1 and prior is susceptible to an unauthenticated command injection vulnerability. The authenticate.php file uses the user HTTP POST parameter in a call to the shellexec PHP function without appropriate input validation, allowing arbitrary command execution as the apache user. The...
CVE-2026-100542
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
CVE-2026-100542
The OpenClaw (npm package 'openclaw' ) versions >= 2026.5.28 and
CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
EUVD-2026-87508
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...
CVE-2026-100542 OpenClaw before 2026.8.1 Extraction Limit Bypass via tar.bz2
OpenClaw npm package 'openclaw' versions = 2026.5.28 and 2026.8.1 mishandle archive listings in the tar.bz2 skill installer: bounded command-output suffixes were treated as complete listings of the archive. A crafted .tar.bz2/.tbz2 skill archive can push prohibited entries out of both retained...