Gin-Vue-admin-poc-CVE-2022-21660

Gin-Vue-admin Vertical Privilege Escalation Vulnerability and Code Analysis - CVE-2022-21660 1. Foreword Welcome everyone to give this project a star.http https://github.com/flipped-aurora/gin-vue-admin/ root@kitploit: After finishing the article, applying for a CVE was somewhat troublesome, but...

CVE-2021-44103

CVE-2021-44103 A proof of concept for KONGA 0.14.9 - Privilege Escalation. Intro On November 16, 2021, Fabrício Salomão and I found a vulnerability in Konga API Gateways, allowing any authenticated user to become an administrator. Report Vulnerability Product: KONGA Model: 0.14.9 Vulnerability:...

Apache-couchdb-CVE-2017-12635

CouchDB Vertical Privilege Escalation Vulnerability CVE-2017-12635 Apache CouchDB is an open-source database that focuses on ease of use and being a "fully web-embracing database." It is a NoSQL database that uses JSON as the storage format, JavaScript as the query language, and MapReduce and HTT...

CLEANSTART-2026-YJ84497 Security fixes in vertical-pod-autoscaler 1.6.0-r1

Package vertical-pod-autoscaler version 1.6.0-r1 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-OZ55229 Security fixes in vertical-pod-autoscaler 1.6.0-r2

Package vertical-pod-autoscaler version 1.6.0-r2 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-FS80399 Security fixes in vertical-pod-autoscaler 1.7.1-r1

Package vertical-pod-autoscaler version 1.7.1-r1 fixes 1 vulnerabilities: CVE-2026-41178...

CLEANSTART-2026-CT32025 Security fixes in vertical-pod-autoscaler 1.5.1-r4

Package vertical-pod-autoscaler version 1.5.1-r4 fixes 1 vulnerabilities: CVE-2026-29181...

CLEANSTART-2026-FH07251 Security fixes in vertical-pod-autoscaler 1.7.1-r2

Package vertical-pod-autoscaler version 1.7.1-r2 fixes 2 vulnerabilities: CVE-2026-46600, CVE-2026-56852...

CVE-2026-83596 Webkitgtk: validate the full featurelist array once in opentypeverticaldata findfeature

A flaw was found in WebKitGTK. Processing malicious web content can cause memory corruption due to improper memory handling...

CVE-2026-83596

CVE-2026-83596 is a memory corruption vulnerability in WebKitGTK caused by improper handling of the featurelist array in the OpenTypeVerticalData::findFeature function. Processing malicious web content can trigger the flaw, leading to memory corruption with high impact on confidentiality, integri...

EUVD-2026-68881

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

CVE-2026-75458

The teacher-end interface POST /api/teacher/user/delete/id in XueZhiSi Open Source Exam System = 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserByIdid, setDeletedtrue, updateByIdFilter in sequence, without any validation of...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

A Broken Access Control vulnerability exists in ThingsBoard Professional Edition PE 4.21 and below, within the Alarms comments functionality. An authenticated customer user can manipulate the respective API request parameters to create or modify system-generated alarm comments. This allows...

CVE-2025-70340

CVE-2025-70340 is a Broken Access Control vulnerability in ThingsBoard Professional Edition (PE) 4.21 and below , specifically within the Alarms comments functionality. An authenticated customer user can manipulate API request parameters to create or modify system-generated alarm comments , enabl...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fbdev: sisfb: Fixed strbuf array overflow issue. The values of the variables xres and yres are stored in strbuf. These variables are obtained from strbuf1. The strbuf1 array contains digit characters, and a space if the array...

MAL-2026-14070 Malicious code in @ai-vertical/ai-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3daa0f3fabdeebe3db0146233d623d65ae16aea601e54fd6519a160db5af8ee On require/import, index.js fetches a hardcoded GitHub Gist gist.github.com/aiverticalsolutions/7676451d2f972137d2482c4a8937a77a via the api.github.c...

CVE-2026-68254

In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid. Most scenarios are already covered by coincidence through the checks in intelvrriscapable and intelvrrisinrange, but be more...

CLEANSTART-2026-KM46423 Security fixes in vertical-pod-autoscaler-fips 1.5.1-r2

Package vertical-pod-autoscaler-fips version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139, CVE-2026-27141...

CLEANSTART-2026-CC98866 Security fixes in vertical-pod-autoscaler 1.5.1-r2

Package vertical-pod-autoscaler version 1.5.1-r2 fixes 4 vulnerabilities: CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2025-61732...