ehir-vuln-enterprise-login

エンタープライズ社内ポータル ローカルセットアップ このプロジェクトは、フロントエンドポータルと統合バックエンドゲートウェイを備えたローカルのコンテナ化環境です。 ワークスペース構成 client/: Bootstrap 5 を使用した静的フロントエンドファイル（index.html）と API 接続ハンドラが格納されています。 docker-compose.yml: ローカル向けマルチコンテナオーケストレーションファイルです。 利用手順 1. スタックのビルドと起動 バックグラウンド（デタッチモード）でサービスを起動するには: docker-compose up -d 2...

EUVD-2026-81824

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix unconfined user namespace restriction forced stack If a task is already confined by a stack the unprivileged transition restriction on unconfined is not correctly, applied. This results in an escape if two transitio...

CVE-2026-82533: Reliance on Untrusted Inputs in a Security Decision

DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerability that grants unauthenticated access to its local HTTP agent-control API by accepting a client-supplied loopback Host header in place of validating the actual TCP connection origin. On the default configuration, a...

CVE-2026-85685

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.addskill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skillpath request parameter to copy files int...

PT-2026-85571

AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalWorkspace.add skill that copies arbitrary server directories into the agent workspace via an unconfined source path parameter. Attackers can supply any directory path in the skill path request parameter to copy files...

NPM: browse-mcp has an arbitrary file write via unconfined download and state paths

NPM: browse-mcp has an arbitrary file write via unconfined download and state paths vulnerability discovered by ? in WordPress Npm browse-mcp versions = 0.8.1...

CVE-2026-55557 browse-mcp: Arbitrary file write via unconfined download and state paths

browse-mcp is a Playwright-based headless-browser MCP server for MCP-capable agents. Prior to 0.8.2, browserdownload writes a fetched response body to joinsavedir, filename without validating the caller-controlled savedir, while browsersavestate and browserloadstate honor a caller-controlled path...

OESA-2026-3417 policycoreutils security update

It contains the selinux policy core utilities Security Fixes: A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils...

CVE-2026-73973 Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --filename path and opened it as root when invoked through the shipped nagios or icinga sudoers allowlist, without confini...

OESA-2026-3347 policycoreutils security update

It contains the selinux policy core utilities Security Fixes: A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils...

OESA-2026-3346 policycoreutils security update

It contains the selinux policy core utilities Security Fixes: A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils...

OESA-2026-3345 policycoreutils security update

It contains the selinux policy core utilities Security Fixes: A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils...

SUSE CVE-2026-59677

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10...

CVE-2026-59676

A flaw was found in policycoreutils through 3.10 in seunshare. A TOCTOU race lets a local user running in an unconfined SELinux domain delete arbitrary root-owned files. Removing critical system files can cause denial of service; integrity impact is limited to unauthorized deletion. Mitigation...

CVE-2026-59677

A flaw was found in policycoreutils through 3.10 in seunshares. Missing authorization lets a local user in an unconfined SELinux context terminate other processes that are also unconfined, including root-owned ones. That can cause denial of service by killing critical processes. Mitigation...

Linux Distros Unpatched Vulnerability : CVE-2026-59676

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Time-of-check Time-of-use TOCTOU Race Condition vulnerability in seunshare of selinux policycoreutils allows a user calling seunshare that is running in the...

Linux Distros Unpatched Vulnerability : CVE-2026-59677

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processe...

policycoreutils: Policycoreutils: Denial of Service via missing authorization in seunshares

A flaw was found in policycoreutils through 3.10 in seunshares. Missing authorization lets a local user in an unconfined SELinux context terminate other processes that are also unconfined, including root-owned ones. That can cause denial of service by killing critical processes...

policycoreutils: Policycoreutils: Arbitrary file deletion via TOCTOU race condition in seunshare

A flaw was found in policycoreutils through 3.10 in seunshare. A TOCTOU race lets a local user running in an unconfined SELinux domain delete arbitrary root-owned files. Removing critical system files can cause denial of service; integrity impact is limited to unauthorized deletion...

DEBIAN-CVE-2026-59677

A Missing Authorization vulnerability in selinux policycoreutils seunshares allows a user that is running in unconfined context to kill e.g. root-owned processes running also in unconfined context This issue affects policycoreutils through 3.10...