375 matches found
CVE-2026-117346
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
CVE-2026-63115 ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...
CVE-2026-63115 ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...
CVE-2026-63115
The ActivityPub server (versions 1.0.0 through 1.2.6), a multi-tenant ActivityPub server for Ghost built with Fedify, contains a vulnerability in the Undo handler . This flaw allows a remote federated server to trigger actions as if they originated from a different account, enabling the unfollow ...
CVE-2026-63115 ActivityPub Undo handler can unfollow or remove reposts on behalf of other accounts
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...
CVE-2013-3900_Remediation_PowerShell
CVE-2013-3900RemediationPowerShell Script to make changes on registry to fix CVE-2013-3900. It comes with an option to undo in case it breaks something on your environment. Steps Download the script, run it with Admin Privileges, reboot the machine...
CVE-2026-117346
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
CVE-2026-117346: n/a: Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
CVE-2026-117346
Bitcoin Core versions through 31.1 are vulnerable to a Denial of Service (DoS) attack. The root cause is that undo files do not have a size limit, which can lead to resource exhaustion. This vulnerability is categorized under CWE-770 (Allocation of Resources Without Limits or Throttling). No spec...
CVE-2026-117346
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
CVE-2026-63115: TryGhost ActivityPub: ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify
ActivityPub is a multi-tenant ActivityPub server for Ghost, built with Fedify. From 1.0.0 until 1.2.6, the Undo handler allows a remote federated server to cause the service to act on a follow or repost as though the activity came from a different account. This permits removal of an existing foll...
EUVD-2026-114087
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
PT-2026-133601
Bitcoin Core through 31.1 is vulnerable to Denial of Service via undo files having no size limit...
CVE-2026-116825
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature, which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/formId/actor/inbox endpoint can replay it later to re-execute Delete, Update,...
CVE-2026-116825
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature, which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/formId/actor/inbox endpoint can replay it later to re-execute Delete, Update,...
PT-2026-125530
YesWiki from 4.6.2 before 4.7.0 lacks replay protection in HttpSignatureService::verifySignature, which never validates the Date header or tracks seen signatures. Attackers who capture a signed request to the /api/forms/formId/actor/inbox endpoint can replay it later to re-execute Delete, Update,...
Astra Linux – vulnerability in linux-6.12
In the Linux kernel, the following vulnerability has been resolved: RDMA/mana: Fix manadestroywqobj cleanup in manaibcreateqprss Sashiko points out that there are two bugs in the error unwind flow here; both are related to how the WQ table is unwound. First, there is a double i-- on the first...
Astra Linux – Vulnerability in Vim
Vim is an open-source command-line text editor. From version 9.2.0320 to 9.2.0679, a crafted undo or swap file could store a virtual-text property whose offset and length points outside the line’s property data. When Vim restores or displays such a line, it converts the offset into a pointer and...
