Astra Linux – Vulnerability in Linux

A vulnerability was discovered in the Linux kernel, where the non-blocking socket operation in llcpsockconnect leads to a leak and ultimately causes the system to hang...

Astra Linux – Vulnerability in tar

A flaw was discovered in the src/list.c file of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The greatest threat posed by this vulnerability is to system availability...

CVE-2021-46071

CVE-2021-46071 Titre de l'exploit : Système de gestion des services de véhicules - 'Liste des catégories' Cross-Site Scripting XSS stocké Auteur de l'exploit : SANU P.L CVE : CVE-2021-46071 CVSS : 4.8 MEDIUM Références :...

Security Bulletin: Kernel privilege escalation and disclosure Vulnerabilities in Linux in IBM Cloud Pak System[CVE-2026-46300, CVE-2026-46333, CVE-2026-43284]

Summary Multiple vulnerabilities in the Linux kernel affect the underlying operating system used by Platform system Manager PSM and OS Image for Red Hat Enterprise Linux Systems shipped with Cloud Pak System, . These issues include a local privilege escalation flaw in the networking subsystem...

kernel: KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active

A flaw was found in KVM Kernel-based Virtual Machine. When the Advanced Virtual Interrupt Controller AVIC is inhibited while a nested guest L2 is active, KVM fails to properly update x2APIC MSR intercepts for the primary guest L1. This allows the L1 guest to read the host's APIC state, send...

kernel: nvme: add missing SRCU grace period in error path

A flaw was found in the NVMe Non-Volatile Memory Express driver of the Linux kernel. The nvmeallocns function's error handling path fails to wait for all SRCU Sleepable Read-Copy Update readers to complete before freeing a namespace structure. This oversight allows a concurrent reader to access a...

Security Bulletin: Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability

Summary Due to AIX, IBM Cloud Pak System is affected by NULL pointer dereference vulnerability. Vulnerability was addressed in OS Image for AIX IBM Cloud Pak System version 2.3.5.1. Vulnerability Details CVEID:CVE-2025-49795 DESCRIPTION: A NULL pointer dereference vulnerability was found in libxm...

macOSTriageCollectionScript

macOSTriageCollectionScript Un script de collecte de données de triage pour macOS qui utilise sysdiagnose avec quelques ajouts pour rassembler des données de triage utiles aux investigations. Que collecte le script ? Les données collectées incluent : sysdiagnose , un utilitaire présent sur divers...

CVE-2023-49969

CVE-2023-49969 Customer Support System 1.0 - Vulnérabilité d'injection SQL dans editcustomer via le paramètre 'id' de l'URL Description : Une vulnérabilité d'injection SQL existe dans la version 1 du Système de Support Client. Un attaquant malveillant peut exécuter des commandes SQL sur la base d...

CVE-2020-17530

Exploit d'injection OGNL Résumé Script Python simple pour exploiter les vulnérabilités d'injection OGNL dans Apache Struts2/Tomcat et exécuter des commandes système. Utilisation pip install requests colorama python3 exploit.py -u http://target/index.action -c "id"...

WordPress Salon booking system plugin <= 10.31.7 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by Nixxies in WordPress Plugin Salon booking system versions = 10.31.7...

CVE-2026-75616

CVE-2026-75616 Injection de commandes système authentifiée dans l'interface de gestion web du TP-Link Archer C20 v6. Les valeurs de configuration WAN BPA sont transmises à system sans neutralisation adéquate, ce qui permet à un administrateur authentifié sur le réseau adjacent d'exécuter des...

CVE-2021-46067

CVE-2021-46067 Titre de l'exploit : Vehicle Service Management System - 'Multiple' Vol de cookies conduisant à une prise de contrôle complète du compte Auteur de l'exploit : SANU P.L CVE : CVE-2021-46067 CVSS : 9.8 CRITIQUE Références :...

Vehicle-Service-Management-System-Service-List-Stored-Cross-Site-Scripting-XSS

CVE-2021-46072 Название эксплойта: Vehicle Service Management System - хранимый межсайтовый скриптинг XSS в 'Service List' Автор эксплойта: SANU P.L CVE: CVE-2021-46072 CVSS: 4.8 MEDIUM Ссылки: https://www.plsanu.com/vehicle-service-management-system-service-list-stored-cross-site-scripting-xss...

xz-backdoor-research

Boîte à outils de recherche CVE-2024-3094 Par Nikolaos Natsopoulos , Consultant IAM Outil interactif basé sur navigateur accompagnant le rapport de recherche : « CVE-2024-3094 : Compromission de la chaîne d'approvisionnement via l'ingénierie sociale et la manipulation du système de construction...

CVE-2026-36213-poc

CVE-2026-36213 : Élévation de privilèges locale dans MEmu Android Emulator 9.2.7.0 https://img.shields.io/badge/platform-Windows-blue https://img.shields.io/badge/CVE-2026--36213-red https://img.shields.io/badge/EDB--ID-52615-orange Aperçu Ce dépôt contient une preuve de concept PoC en Python pou...

CVE-2026-105254

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

CVE-2026-105253

A vulnerability was determined in itsourcecode Online Admission System Project 1.0. This issue affects some unknown processing of the file /admin/login1.php. This manipulation of the argument User causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed...

CVE-2026-104806

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP port 443. The application fails to...

CVE-2024-57429

CVE-2024-57429 ثغرة أمنية من نوع تزوير الطلب عبر المواقع CSRF في دالة pjActionUpdate ضمن نظام حجز السينما PHPJabbers v2.0 تسمح للمهاجمين عن بُعد بتصعيد الصلاحيات عن طريق خداع مدير موثوق لإرسال طلب غير مصرح به. التأثير: استغلال هذه الثغرة CSRF يمكن أن يؤدي إلى إجراءات غير مصرح بها، مثل: تغيير كلمة...