SoliditySecurity

Что это такое Этот пост задуман как относительно подробное и актуальное вводное руководство, описывающее прошлые ошибки, которые совершали разработчики Solidity, чтобы помочь будущим разработчикам не повторять историю. Содержание 1. Re-Entrancy Уязвимость Методы предотвращения Реальный пример: Th...

Winrar-Exploit-CVE-2023-38831

WinRAR Exploit Builder WinForms / .NET Framework WinRAR Versione Inferiore alla 6.23 Panoramica Questo repository contiene una piccola utility desktop/console per Windows scritta in C .NET Framework 4.8 che mostra una tecnica di struttura degli archivi comunemente discussa in contesti di ricerca...

LOLBAS

Binários e Scripts "Living Off The Land" e agora também Bibliotecas Todos os diferentes arquivos podem ser encontrados por trás de uma interface elegante aqui: https://lolbas-project.github.io obrigado @ConsciousHacker por este mimo visual e a equipe do https://gtfobins.github.io/. Este repositór...

CVE-2026-29628

CVE-2026-29628 overflow del buffer nel parser sperimentale di tinyobjloader Riepilogo Overflow del buffer basato su stack in https://github.com/tinyobjloader/tinyobjloader, che interessa solo la versione sperimentale e può portare a risultati imprevisti. Versioni interessate tinyobjloader è...

CVE-2025-51679

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

CVE-2025-3243

🔐 CVE-2025-3243 SSH Checker Быстро. Лаконично. Без лишнего. Python-скрипт для начальной проверки подверженности уязвимости CVE-2025-3243 , связанной с SSH-клиентом Erlang/OTP. Этот проект предназначен для быстрой сортировки , снижения операционной неопределённости и валидации поверхности атаки в...

CVE-2025-51679

CVE-2025-51679 affects the openRISC OR1200 processor at commit 83ac6b , where a mismatch between the RTL (Register Transfer Level) and the netlist can lead to unexpected behavior . The CNA-assigned CVSS 3.1 score is 9.1 (CRITICAL) , with a network attack vector , low complexity , no privileges re...

EUVD-2025-210801

An issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist can lead to unexpected behavior...

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting

A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...

CVE-2026-20679

CVE-2026-20679 is a vulnerability in the CoreUI framework on macOS. Processing a maliciously crafted file may lead to unexpected app termination (denial of service). The root cause is not further specified beyond "improved checks" being applied as the fix. The issue was reported by Mustafa Calap ...

EUVD-2026-63776

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4. Processing a maliciously crafted file may lead to unexpected app termination...

Linux Distros Unpatched Vulnerability : CVE-2026-64757

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6 and iPadOS...

OPENSUSE-SU-2026:21603-1 Security update for gitea-tea

This update for gitea-tea fixes the following issues: Changes in gitea-tea: - Update to 0.15.1, bringing in the 0.14.2/0.15.0/0.15.1 upstream changes below bsc1253576: CVE-2025-47913: golang.org/x/crypto/ssh/agent client process termination on an unexpected response to a key listing or signing...

EUVD-2026-60507

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

EUVD-2026-60503

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

EUVD-2026-60512

This issue was addressed through improved state management. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65349

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. An app may be able to cause unexpected system termination or read kernel memory...

CVE-2026-65334

A memory corruption issue was addressed with improved state management. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-43795

The issue was addressed with improved memory handling. This issue is fixed in Safari 26.6.1, iOS 18.7.10 and iPadOS 18.7.10, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...

CVE-2026-65351

This issue was addressed through improved state management. This issue is fixed in Safari 26.6.1, iOS 26.6.1 and iPadOS 26.6.1, macOS Tahoe 26.6.2. Processing maliciously crafted web content may lead to an unexpected Safari crash...