Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: sysctl: Always initialize iuid/igid. iuid/igid is always initialized within the sysfs core, so setownership can safely skip setting them. The commit 5ec27ec735ba from “fs/proc/procsysctl.c: fix the default values of iuid/igid on...

GrafanaSCIMalform

Grafana SCIMalform CVE-2025-41115 Overview This repo is my research on CVE-2025-41115 vulnerability in Grafana Enterprise SCIM component. It consist of a test stand with vulnerable app and exploit code. References Just some usefull refs: NIST - NIST index Grafana Article - Original blog post...

CVE-2025-4162028

Security Advisory: CVE-2025-4162028 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

CVE-2025-4162027

Security Advisory: CVE-2025-4162027 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

Dockerized-CVE-2019-14287

Dockerized CVE-2019-14287 Containerized and deployable use of the CVE-2019-14287 vuln. View README.md for more. This CVE affects all versions of sudo under 1.8.28 where a sudo user can escalate to root by referencing its user ID. This Dockerfile allows this CVE to be built, where it can be used f...

CVE-2026-73034-PoC

CVE-2026-73034 — DB-GPT v0.8.1 Unauthenticated Path Traversal → Arbitrary File Write CVSS 9.8 Critical · CWE-22 · GHSA/Issue 3104 Summary POST /api/v1/python/file/upload in DB-GPT v0.8.1 takes the user-id HTTP header and uses it raw as a path component : uploaddir = os.path.joinbasedir,...

panos-captive-portal-rce

CVE-2026-0300 — PAN-OS User-ID Captive Portal Buffer Overflow RCE Scanner 🎯 Overview Buffer overflow in User-ID Authentication Portal Captive Portal service of PAN-OS. Unauthenticated attacker can execute code as root on affected Palo Alto Networks firewalls. Field| Value ---|--- CVE| CVE-2026-03...

PT-2026-104073

Name of the Vulnerable Software and Affected Versions DevKit Pro versions prior to 3.0.0 Description An authentication bypass exists in the DevKit Pro plugin for WordPress. The issue occurs because the revert switch handler trusts the original user id cookie, which is controlled by the attacker, ...

CVE-2026-0300

PAN-OS CVE-2026-0300 Инструмент неразрушающего обследования подверженности Обзор Этот инструмент представляет собой неразрушающую утилиту обследования подверженности для оценки того, может ли целевой сервис PAN-OS предоставлять доступные из сети поверхности, связанные с CVE-2026-0300. Инструмент...

PAN-OS-User-ID-Buffer-Overflow-PoC

🛡️ CVE-2026-0300: Анализ RCE-уязвимости User-ID™ Portal в PAN-OS Исследовательский Proof-of-Concept: CWE-787 Запись за пределами буфера 📌 Обзор CVE-2026-0300 — это уязвимость переполнения буфера высокой степени серьезности, обнаруженная в портале аутентификации User-ID™ Captive Portal Palo Alto...

CVE-2026-0300-POC

🛡️ CVE-2026-0300: Анализ RCE-уязвимости User-ID™ Portal в PAN-OS Исследовательский Proof-of-Concept: CWE-787 Выход за границы буфера при записи 📌 Обзор CVE-2026-0300 — это уязвимость переполнения буфера высокой степени серьезности, обнаруженная в Palo Alto Networks PAN-OS портале аутентификации...

CVE-2026-0300-PANOS

CVE-2026-0300-PANOS 🔓 Неаутентифицированное удалённое выполнение кода RCE в User-ID Portal Palo Alto Networks PAN-OS 📋 Сведения об уязвимости Свойство| Значение ---|--- ID CVE| CVE-2026-0300 Тип уязвимости| Неаутентифицированное удалённое выполнение кода Затронутый компонент| User-ID Portal Palo...

cve-2026-0300-audit

Инструментарий аудита CVE-2026-0300 Инструментарий аудита только для чтения для CVE-2026-0300 — неаутентифицированное переполнение буфера в портале аутентификации User-ID PAN-OS ранее известном как «Captive Portal» на межсетевых экранах серий PA и VM. Этот репозиторий сопровождает бюллетень...

CVE-2026-0300

🚨 CVE-2026-0300 - Critical Unauthenticated Remote Code Execution in Palo Alto Networks PAN-OS Buffer Overflow in User-ID™ Authentication Portal Captive Portal — Actively Exploited in the Wild 📋 Overview A critical buffer overflow vulnerability CWE-787 in the User-ID Authentication Portal of PAN-O...

CVE-2025-4162030

Security Advisory: CVE-2025-4162030 This security summary was provided by CoPilot ^1^. The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be...

CVE-2025-4162029

Security Advisory: CVE-2025-4162029 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

CVE-2025-4162026

Security Advisory: CVE-2025-4162026 The content provided on this website is available for informational purposes only and may be accessed and used by search engines or language models LLMs with the following restrictions: The content may be reproduced, summarized, or utilized in derivative works,...

Sudo-Vulnerability-Exploit-CVE-2019-14287

Sudo-Vulnerability-Exploit-CVE-2019-14287 Sudo has been discovered to be unreliable, one of the most significant, powerful, and commonly used utilities installed in almost any Unix and Linux based operating system as a simple command. A pseudo security policy bypass flaw that allows arbitrary...

Sudo-Security-Bypass-CVE-2019-14287

Sudo-Security-Bypass-CVE-2019-14287 =========================================================================== ██████╗██╗ ██╗███████╗ ██████╗ ██████╗ ██╗ █████╗ ██╗██╗ ██╗██████╗ █████╗ ███████╗ ██╔════╝██║ ██║██╔════╝ ╚════██╗██╔═████╗███║██╔══██╗ ███║██║ ██║╚════██╗██╔══██╗╚════██║ ██║ ██║...

CVE-2026-87004: Improper Verification of Cryptographic Signature

Tugtainer is a self-hosted app for automating updates of Docker containers. Prior to version 1.31.3, when the OIDC login flow completes, backend/modules/auth/providers/authoidcprovider.py decodes the idtoken returned by the identity provider's token endpoint using jose.jwt.getunverifiedclaims...