4 matches found
EUVD-2026-59507
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject exclusive maps for bpfmapelem iterators Exclusive maps aka exclproghash are meant to be reachable only from the single program whose hash matches. This is enforced by checkmapprogcompatibility when the map is referenc...
File Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scope
Summary File Browser enforces per-user scope with afero.NewBasePathFsafero.NewOsFs, scope, set up in users/users.go. This blocks lexical ../ traversal, but it does not stop the HTTP file handlers from following symbolic links before they open, serve, write, share, or list a file. As a result, a...
Linux Distros Unpatched Vulnerability : CVE-2025-68239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - binfmtmisc: restore write access before closing files opened by openexec bmregisterwrite opens an executable file using openexec, which internally calls...
CVE-2024-51004
Netgear R8500 (v1.0.2.160) and R7000P (v1.3.3.154) expose multiple stack overflow vulnerabilities in the usb_device.cgi component, exploitable via cifs_user, read_access, and write_access parameters. A crafted POST to the /usb_device.cgi endpoint can cause a Denial of Service. Connected sources c...