CVE-2026-31431-patch

CVE-2026-31431-patch CVE-2026-31431 脆弱性に対する一時的な緩和策 git clone https://github.com/rshosting/CVE-2026-31431-patch.git cd CVE-2026-31431-patch sh checkaead.sh サーバーが再起動から復帰したら、以下のスクリプトを実行してください: sh completeaead.sh...

wordpress-skelersecurity-core-security-CVE-2026-63030

SkelerSecurity Core 安全插件 一个针对性、临时性的缓解措施，用于防范对 WordPress Core REST Batch API 端点的未认证访问。 概述 SkelerSecurity Core 安全插件 要求在进行认证之后，WordPress 才能处理对 Core REST Batch API 路由的请求： /wp-json/batch/v1 /?restroute=/batch/v1 它被设计为针对常被称为 wp2shell 的 WordPress REST Batch API 漏洞链的一个有限范围内的深度防御控制措施。该插件使用 WordPress 的...

CVE-2025-66478-kinda-waf

kinda-waf 単純な一時的なWAF防御テスターで、特定のペイロードシーケンスを対象としています。 ウェブサイトが適切にパッチ適用されるまで安全を保つのを助けましょう！ 目的 CVE-2025-66478から保護するために、特定のペイロードシグネチャを含むリクエストを検出しブロックします。これは正規のトラフィックを壊さず、適切にメンテナンスされていないウェブサイトを守るはずです。 そして再起動後はリセットされるため、恒久的な解決策ではありません 要件 Python 3 使い方 スクリプトを実行（デフォルトはlocalhost）： python main.py 特定のURLで実行：...

Exploit for CVE-2017-0144

LegacyShield — EternalBlue Module A Windows desktop security...

PT-2026-36292

Name of the Vulnerable Software and Affected Versions SourceCodester Advanced School Management System version 1.0 Description A SQL injection flaw exists in the 'checkEmail' endpoint within the commonController.php file. This issue allows remote attackers to manipulate database queries through a...

CVE-2025-68435 Zerobyte has Authentication Bypass by Primary Weakness

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This...

SUSE CVE-2025-68216

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

UBUNTU-CVE-2025-68216

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

CVE-2025-68216

Summary (CVE-2025-68216): In the Linux kernel, LoongArch-architecture BPF trampoline attachments to kernel module functions have been disabled due to incompatibilities with tracing in modules. This prevents attaching BPF fentry/trampoline probes to module functions, addressing severe user-visible...

CVE-2025-68216 LoongArch: BPF: Disable trampoline for kernel module function trace

In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Disable trampoline for kernel module function trace The current LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules. This causes several severe and user-visible problem...

PT-2025-51629

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The LoongArch BPF trampoline implementation is incompatible with tracing functions in kernel modules, leading to issues such as test failures, kernel lockups when attaching BPF programs ...

EUVD-2022-36952

Malicious code in bioql PyPI...

PT-2025-26576 · Htacg +1 · Tidy-Html5 +1

Name of the Vulnerable Software and Affected Versions: HTACG tidy-html5 version 5.8.0 Description: A memory leak issue has been discovered, affecting the defaultAlloc function in the src/alloc.c file. This issue can be exploited locally, potentially leading to memory leak. The exploit details hav...

PT-2024-12602 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions through 4.6 Description: The issue concerns an unprotected JMX Registry in Loftware Spectrum. Recommendations: For versions through 4.6, consider restricting access to the JMX Registry as a temporary mitigation...

PT-2024-27077 · Unknown · Akbr Update

Name of the Vulnerable Software and Affected Versions: akbr update version 1.0.0 Description: The issue is related to Prototype Pollution, which occurs via the update/index.js file. Recommendations: For akbr update version 1.0.0, consider restricting access to the update/index.js file as a...

PT-2024-14508 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM DB2 for Linux, UNIX and Windows includes Db2 Connect Server version 11.5 Description: The issue is related to a denial of service condition that can occur when querying a specific UDF built-in function concurrently. Recommendations: For I...

PT-2023-21328 · Wondershare · Wondershare Uniconverter

Name of the Vulnerable Software and Affected Versions: Wondershare UniConverter version 14.0.0 Description: An issue in Wondershare UniConverter allows a remote attacker to execute arbitrary commands via the uniconverter14 64bit setup full14204.exe file. Recommendations: For Wondershare...

PT-2022-27909 · Trendnet · Trendnet Tew755Ap

Name of the Vulnerable Software and Affected Versions: TRENDnet TEW755AP version 1.13B01 Description: A stack overflow issue was discovered, related to the cameo.nslookup target parameter in the tools nslookup function. Recommendations: For TRENDnet TEW755AP version 1.13B01, avoid using the...

CVE-2022-33915

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a race condition that could lead to a local privilege escalation. This Hotpatch package is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 or...

Important: log4j-cve-2021-44228-hotpatch

Issue Overview: Versions of the Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3-5 are affected by a race condition that could lead to a local privilege escalation. The Apache Log4j Hotpatch is not a replacement for updating to a log4j version that mitigates CVE-2021-44228 o...