Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework 6.23 미만의 WinRAR 버전 개요 이 저장소는 보안 연구 맥락에서 흔히 논의되는 아카이브 구조 기법 을 시연하는 C.NET Framework 4.8로 작성된 소형 Windows 데스크톱/콘솔 유틸리티를 포함합니다. CVE-2023-38831 정보 개괄 이 프로젝트는 온라인에서 CVE-2023-38831 과 흔히 연관됩니다. 이는 특수하게 조작된 아카이브로 인해 사용자가 정상적인 파일처럼 보이는 항목과 상호작용할 때 예상치 못한 콘텐츠 ...

CVE-2026-63431: Missing Authorization

Horilla is an HR and CRM software. In 1.5.0-85 and earlier, payroll/views/componentviews.py does not consistently authorize access in allowancesdeductionstab, viewsingleallowance, and viewsinglededuction before loading records selected by empid, allowanceid, or deductionid. An authenticated...

How to Break the Miranda Signature Scheme over Matrix Gabidulin Codes

The Miranda signature scheme relies on masking a matrix code which disposes of a masked underlying structure, and the knowledge of which allows for efficient error decoding. We consider a Gabidulin code which is expanded into a matrix code, that is only \Fq-linear. An additional masking is then...

CVE-2026-55632

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

CVE-2026-55632 GoCD is vulnerable to authorization bypass via pipeline structure API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

CVE-2026-55632 GoCD is vulnerable to authorization bypass via pipeline structure API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

EUVD-2026-85517

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

CVE-2026-55632

The continuous delivery server GoCD is affected by an authorization bypass vulnerability in the internal pipeline structure API (versions 20.2.0 through 26.1.0). The API, which is used for autocompletion when editing configurations like pipelines, templates, environments, and user preferences, in...

CVE-2026-55632 GoCD is vulnerable to authorization bypass via pipeline structure API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...

CVE-2026-91805

Foxit PDF Editor/Reader contains a use-after-free vulnerability in its PDF page-tree handling mechanism. A specially crafted PDF can trigger page-structure changes during rendering, which causes the application to access released page objects . This vulnerability can lead to memory corruption and...

ROS-20260922-73-0042

The vulnerability of the tlspushrecord function in the net/tls/tlssw.c module of the TLS protocol implementation in the Linux operating system is related to incorrect access to elements of the structure. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality...

EUVD-2026-84013

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

PT-2026-96156

Name of the Vulnerable Software and Affected Versions Intel SEDI IPM affected versions not specified Description The Intel SEDI IPM driver contains an out-of-bounds write issue in the ipm event dispose function within drivers/ipm/ipm sedi.c. The driver processes inbound message interrupts by...

CVE-2026-17051: Out-of-bounds Write

The Intel SEDI IPM inter-processor mailbox driver in drivers/ipm/ipmsedi.c handles an inbound message interrupt in ipmeventdispose. It read the peer-written doorbell register, extracted the payload length with IPCHEADERGETLENGTH, and passed that length straight to sediipcreadmsg to copy the messa...

ROS-20260921-73-0129

The vulnerability in Golang is related to the lack of protection for the structure of web pages. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to the lack of measures taken to protect the website structure, allows attackers to enhance their privileges.

The vulnerability of the ColdFusion software platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerabilities in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and includes/specials/specialVersion.php of the MediaWik software, which is used to implement the hypertext environment, allow attackers to perform cross-site scripting (XSS) attacks.

The vulnerability in the scripts included/language/language.php, includes/logging/blockLogFormatter.php, includes/logging/logFormatter.php, includes/logging/patrolLogFormatter.php, includes/logging/renameuserLogFormatter.php, includes/logging/tagLogFormatter.php, and...

ROS-20260916-73-0067

The vulnerability in the fs/btrfs/transaction.c component of the Linux operating system is related to incorrect handling of structure elements. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the script included in the syntaxhighlight.php tool used for implementing the MediaWiki hypertext environment allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the syntaxHighlight.php script used by the MediaWiki hypertext environment is related to insufficient protection of the web page structure. Exploiting this vulnerability could allow a malicious actor, operating remotely, to perform cross-site scripting attacks XSS...

CVE-2026-11864

IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to...