26725 matches found
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: octeontx2-af: Workarounds for stalls caused by disabling sticky operations. It is known that the sticky mode of the NIX SQ manager can cause stalls when multiple SQs share an SMQ and transmit concurrently. Additionally, PSE ma...
Astra Linux – Vulnerability in exim4
Exim 4 before 4.94.2 has an improper neutralization of line delimiters, which is relevant in non-default configurations that enable Delivery Status Notification DSN. Certain uses of ORCPT= can cause a new line to be inserted into a spool header file, thereby indirectly allowing unauthenticated...
Astra Linux – Vulnerability in Apache2
The vulnerability of “Allocation of Resources Without Limits or Throttling” in Apache HTTP Server’s modmd, through OCSP response data. This issue affects Apache HTTP Server versions 2.4.30 through 2.4.66. Users are recommended to upgrade to version 2.4.67, which fixes this issue...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: In loopsetstatusfrominfo, the checks for lo-looffset and lo-losizelimit should be performed before reassigning them. This is because if an overflow error occurs, the original correct value will be changed to the wrong value, and ...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: media: imx-jpeg: Disabled the unnecessary interrupt to avoid kernel panic. There is a hardware bug where the interrupt STMBUFHALF may be triggered after or when the interrupt is disabled. This may lead to unexpected kernel panic...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: drm/sti: The return type of stidvo,hda,hdmiconnectormodevalid has been corrected. With Clang’s Kernel Control Flow Integrity kCFI, CONFIGCFICLANG, indirect call targets are validated against the expected function pointer...
Astra Linux – Vulnerability in opensc
A flaw was discovered in OpenSC packages that could allow for a potential PIN bypass. When a token/card is authenticated by one process, it can perform cryptographic operations in other processes when an empty zero-length PIN is passed. This issue poses a security risk, especially for OS...
Astra Linux – Vulnerability in bluez
The bluetoothd function from the bluez library incorrectly preserves the discoverable status of adapters when a device is powered down, and restores that status when the device is powered on again. If a device is in the discoverable state while powered down, it will remain discoverable when the...
Astra Linux – Vulnerability in Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: s390/cio: Fixed an out-of-bounds access issue related to the cioignore function. The channel-subsystem-driver scans for newly available devices whenever device IDs are removed from the cioignore list, using commands like: echo fr...
Exploit for CVE-2026-90782
CVE-2026-90782 — S2OPC Status-Clobbering NULL Dereference Sta...
CVE-2026-90703
creationtimestamp| type| source ---|---|--- 2026-09-14 05:16:37+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117267693354879908 2026-09-14 10:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvhv5n63wb24 2026-09-14 10:30:25+00:00| seen|...
CVE-2026-77771
creationtimestamp| type| source ---|---|--- 2026-09-14 03:00:12+00:00| seen| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw 2026-09-15 00:00:23+00:00| published-proof-of-concept| Telegram/LVlgDwbFSGH2dSS06nRHfzXTVGcYZJpOdIuQwz8F82lNw...
PT-2026-91759
Name of the Vulnerable Software and Affected Versions DocsGPT versions prior to 0.20.1 Description The software posts OAuth connector session tokens to a wildcard target origin in the 'callback-status' endpoint without validating the sender origin. An attacker can act as the window.opener during...
CVE-2026-91201: Origin Validation Error
DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to...
CVE-2026-15600: Improper Neutralization of Special Elements used in an SQL Command
Alior Bank PrestaShop module "raty" for commercial partners is vulnerable to SQL Injection in the toggleCategoryPromotionAction method. The module inserts value of the POST parameter "status" into SQL UPDATE queries without any sanitization or validation. An attacker with access to the product or...
TencentOS Server 4: util-linux (TSSA-2026:0999)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0999 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-90579
creationtimestamp| type| source ---|---|--- 2026-09-13 20:21:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/eoggxcz3opldc...
CVE-2026-89744
creationtimestamp| type| source ---|---|--- 2026-09-13 15:01:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvfufbjt4s22 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...
CVE-2026-53761
creationtimestamp| type| source ---|---|--- 2026-09-13 13:00:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvfnmopjzu2v 2026-09-13 13:00:05+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117263853354402081...
CVE-2026-89674
creationtimestamp| type| source ---|---|--- 2026-09-13 11:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvfilt7kxi24 2026-10-01 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20261002...