359 matches found
CVE-2025-49844
CVE-2025-49844 RediShell AI 製のリバースシェル PoC AI によって作られた Redishell PoC の未検証の完成版。 元の PoC: https://github.com/raminfp/redisexploit/blob/main/exploitpoc.py 韓国人のピース: https://github.com/dwisiswant0/CVE-2025-49844/blob/master/CVE-2025-49844.lua 進捗状況は？ その後、GDB...
CVE-2026-42089
CVE-2026-42089 로컬 패키지 설치 헬퍼가 호출자가 제공한 패키지 이름을 과도하게 신뢰했습니다. yeoman-environment에서 누락된 제너레이터가 사용자 확인 없이 설치될 수 있었고, 이로 인해 공격자가 제어하는 프로젝트 메타데이터가 패키지 설치 및 코드 실행 경로로 바뀔 수 있었습니다. 소개 간단한 보안 질문을 염두에 두고 generator-jhipster 를 리뷰하던 중 이 문제를 발견했습니다: 공격자가 제어하는 프로젝트 메타데이터가 개발자 도구로 하여금 사용자가 명시적으로 요청하기 전에 타사 코드를 가져와...
CVE-2026-89510
creationtimestamp| type| source ---|---|--- 2026-09-18 17:40:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117293265787549640...
CVE-2026-85500 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication
Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...
CVE-2026-85500 `require_confirmed_with` is not enforced on the action and fails open on an unreadable attribute in AshAuthentication
Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...
CVE-2026-85500: Authentication Bypass by Primary Weakness
Authentication Bypass by Primary Weakness vulnerability in team-alembic AshAuthentication allows an unconfirmed user to obtain a session, defeating a mandatory email confirmation requirement. AshAuthentication.Strategy.Password.Actions.checkuser/2 decides whether the attribute named by...
CVE-2026-87184
creationtimestamp| type| source ---|---|--- 2026-09-16 02:14:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2xvgqfk2f 2026-09-16 07:00:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvmkvthlv62f 2026-09-23 03:07:07+00:00| seen|...
CVE-2026-83282
creationtimestamp| type| source ---|---|--- 2026-09-16 01:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvlzlhlam52n 2026-09-16 02:12:57+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvm2udztim2w 2026-09-16 16:00:43+00:00| seen|...
CVE-2026-83151
creationtimestamp| type| source ---|---|--- 2026-09-16 00:13:46+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mvlu7aiuku2p 2026-09-16 03:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvm76b3jxp2t 2026-09-23 09:45:21+00:00| seen|...
CVE-2026-87288
creationtimestamp| type| source ---|---|--- 2026-09-15 21:03:30+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvljkvepjn2e...
CVE-2026-19886
creationtimestamp| type| source ---|---|--- 2026-09-15 20:13:28+00:00| seen| https://bsky.app/profile/vulnsea.com/post/3mvlgrkta4a2i...
CVE-2026-80947
creationtimestamp| type| source ---|---|--- 2026-09-15 04:50:03+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvjt6cirjh27 2026-09-15 04:50:04+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117273251175352978...
CVE-2026-82439
creationtimestamp| type| source ---|---|--- 2026-09-14 21:20:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvizzsw2fw2f...
CVE-2026-73470
creationtimestamp| type| source ---|---|--- 2026-09-14 20:50:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mviye7evdw2t...
CVE-2026-86349
creationtimestamp| type| source ---|---|--- 2026-09-14 14:47:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/ig6ptzcc3vra4...
Astra Linux – Vulnerability in Linux
In the Linux kernel, the following vulnerabilities have been resolved: netfilter: nftct: Skip the evaluation of rules for confirmed conntrack entries. The nftctexpectobjeval function calls nfctextadd for confirmed conntrack entries. However, nfctextadd can only be called when !nfctisconfirmed is...
CVE-2026-18073
creationtimestamp| type| source ---|---|--- 2026-09-13 16:00:02+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117264561041032721 2026-09-13 16:00:02+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mvfxojck6k2g...
CVE-2026-89708
creationtimestamp| type| source ---|---|--- 2026-09-13 12:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvflfcinod2t 2026-09-14 05:03:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvhdhyyi7f2z...