RawrXDA

🎉 announcing dotenvx. run anywhere, multi-environment, encrypted envs. Dotenv es apoyado por la comunidad. Gracias espaciales a: Graphite is the AI developer productivity platform helping teams on GitHub ship higher quality software, faster. dotenv Dotenv es un módulo de dependencia cero que carg...

Apache-Solr-RCE-via-Velocity-template

Apache-Solr-RCE-via-Velocity-template 参考リンク 脆弱性の発生原因： 1. 攻撃者がSolrコンソールに直接アクセスできる場合、/ノード名/config のようなPOSTリクエストを送信することで、そのノードの設定ファイルを変更できます。 2. Apache...

CVE-2026-68768

A flaw was found in hashcat. A vulnerability exists where the software attempts to write more data than its allocated memory can hold, specifically in the function responsible for writing output files. This can happen when processing a specially crafted hash file containing an excessively long...

CVE-2026-3442 vulnerabilities

Vulnerabilities for packages: binutils...

CVE-2026-75141

FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers...

PT-2026-78524

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to commit acf5d7c Description A heap buffer overflow exists in the hvcC box writer. This occurs when writing an HEVC configuration record containing more NAL units of a single type than the count field can represent,...

CVE-2026-66469

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

EUVD-2026-57888

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

CVE-2026-66469 WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

CVE-2026-66469

Unauthenticated Broken Access Control in Arvow AI SEO Writer = 1.5.3 versions...

CVE-2026-66469

The CVE-2026-66469 entry concerns Unauthenticated Broken Access Control in WordPress plugin Arvow AI SEO Writer (versions

CVE-2026-68755

A bundle writer may create misleading release promotion information under specific conditions...

CVE-2026-68755 Bundle writers may alter trusted release information in JFrog Artifactory

A bundle writer may create misleading release promotion information under specific conditions...

CVE-2026-68755

This CVE concerns Artifactory where a bundle writer may alter or create misleading release promotion information under certain conditions. The connected records identify Artifactory’s bundle writer as the affected component, with the underlying issue described as producing misleading release info...

EUVD-2026-57245

A bundle writer may create misleading release promotion information under specific conditions...

PT-2026-71110

A bundle writer may create misleading release promotion information under specific conditions...

WordPress Arvow AI SEO Writer plugin <= 1.5.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by kai63001 in WordPress Plugin Arvow AI SEO Writer versions = 1.5.3...

CVE-2026-16257

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

CVE-2026-16257

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...

CVE-2026-16257 Arvow AI SEO Writer < 1.5.4 - Unauthenticated Arbitrary Post Creation via Webhook Secret Type-Juggling

The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer WordPress plugin before 1.5.4 has not been configured, allowi...