CVE-2026-53935 CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation

Cilium is a networking, observability, and security solution. Prior to 1.17.16, from 1.18.2 to 1.18.9, and from 1.19.0 to 1.19.3, users with the ability to create CiliumLocalRedirectPolicies can specify arbitrary ClusterIPs via addressMatcher, enabling hijacking traffic to Services in any namespa...

Linux Distros Unpatched Vulnerability : CVE-2024-26956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nilfs2: fix failure to detect DAT corruption in btree and direct mappings Patch series nilfs2: fix kernel bug at submitbhwbc. This resolves a kernel BUG reporte...

Ossur Mobile Logic Application 命令注入漏洞

Ossur Mobile Logic Application is an intelligent application for bionic prosthetics from Ossur. A command injection vulnerability exists in Ossur Mobile Logic Application versions prior to 1.5.5, which stems from the presence of multiple bash files in the application's private directory, which ca...

XWiki Platform 安全漏洞

XWiki Platform is a suite of wiki platforms for creating web collaboration applications from the French company XWiki. A security vulnerability exists in XWiki Platform, which stems from the ability to corrupt many translations from wiki pages by creating corrupted documents containing translated...