The vulnerability of the NTFS reparse point mechanism in Samba software, which allows a hacker to modify arbitrary files

The vulnerability of the NTFS reparse point mechanism in Samba software is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...

The vulnerability of the WINS-server software Samba, which allows a hacker to trigger a service failure

The vulnerability of the WINS-server software Samba is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Trend Micro Apex One antivirus software agent allows a hacker to increase their privileges.

The vulnerability of the Trend Micro Apex One antivirus software agent is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow an attacker to increase their privileges...

Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю обойти защитный механизм песочницы

Уязвимость библиотеки ANGLE браузеров Google Chrome и Microsoft Edge связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, обойти защитный механизм песочницы...

The vulnerability in the net/bpf/test_run.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/bpf/testrun.c module of the Linux operating system is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

Уязвимость компонента Fonts браузеров Google Chrome и Microsoft Edge, позволяющая нарушителю вызвать отказ в обслуживании

Уязвимость компонента Fonts браузеров Google Chrome и Microsoft Edge связана с чтением за пределами допустимого диапазона в памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...

Bars Obrazovanie (Alexander) (No. 1 from May 27, 2026 at 13:59:12)

...

The vulnerability of the Zabbix IT-infrastructure monitoring system, related to the use of external control input data for class selection, allows a hacker to execute arbitrary code.

The vulnerability of the Zabbix IT-infrastructure monitoring system lies in the use of externally controlled input data for class selection. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the container management system and the virtual machine manager Incus, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the container management system and the virtual machine manager Incus is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the _has_sneaky_javascript() function in the lxml_html_clean library for the Python programming language allows attackers to perform cross-site scripting (XSS) attacks.

The vulnerability of the hassneakyjavascript function in the lxmlhtmlclean library, written in the Python programming language, is related to incorrect encoding or escaping of output data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

The vulnerability of the formAccept() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to inject arbitrary commands.

The vulnerability of the formAccept function in the microprogramming software for EDIMAX BR-6478AC routers lies in the lack of measures to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the formRadiust() function in the microprogramming software for wireless signal amplifiers of Edimax EW-7438RPn allows a hacker to execute arbitrary code.

The vulnerability of the formRadius function in the microprogramming software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formLicence() function in the microprogramming software for wireless signal amplifiers from Edimax, allows a intruder to execute arbitrary code.

The vulnerability of the formLicence function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the formWpsProxyEnable() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formWpsProxyEnable function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the CKEditor text editor in the Drupal CMS system allows attackers to execute XSS attacks.

The vulnerability of the CKEditor text editor in the Drupal CMS system is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

The vulnerability of the Drupal CMS system’s kernel allows a hacker to execute arbitrary code.

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the container management system and the virtual machine manager Incus, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the container management system and the virtual machine manager Incus is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

The vulnerability of the C-ares asynchronous DNS query library, related to the use of memory after it is freed, allows a hacker to execute arbitrary code.

The vulnerability of the C-ares asynchronous DNS query library is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the aiohttp HTTP client, related to incorrect processing of highly compressed input data, allows attackers to cause service failures.

The vulnerability of the aiohttp HTTP client is related to the improper processing of highly compressed input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the formStats() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formStats function in the microprogramming software of the wireless signal amplifiers Edimax EW-7438RPn is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the stainfo() function in the microprogramming software of Edimax BR-6675nD wireless signal amplifiers allows a hacker to inject arbitrary commands.

The vulnerability of the stainfo function in the microprogramming software of Edimax BR-6675nD wireless signal amplifiers is related to the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability could allow a malicious actor to inject arbitrary...

The vulnerability of the printing subsystem in Samba-enabled network communication programs allows a hacker to execute arbitrary code.

The vulnerability of the printing subsystem in Samba networking-enabled programs is related to the lack of measures taken to neutralize special elements during the processing of the %J parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Nginx UI server’s user interface lies in the lack of origin verification in WebSockets, allowing attackers to disclose confidential information.

The vulnerability of the Nginx UI server’s user interface lies in the lack of origin verification in WebSockets. Exploiting this vulnerability allows an attacker to disclose confidential information remotely...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a perpetrator to gain unauthorized access to protected information...

The vulnerability of the virtual learning environment Moodle, related to improper code generation, allows a perpetrator to execute arbitrary code.

The vulnerability in the virtual learning environment Moodle is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the aiohttp HTTP client, related to deficiencies in HTTP request processing, allows attackers to carry out attacks by replacing HTTP requests.

The vulnerability of the aiohttp HTTP client is related to deficiencies in request processing. Exploiting this vulnerability allows an attacker who operates remotely to carry out attacks by replacing HTTP requests with malicious content...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of protection for operational data, allows a violator to gain unauthorized access to protected information.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the networking routing implementation software on Unix-like systems is related to the handling of the null pointer. Exploiting this vulnerability can allow an attacker to cause service failures.

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Python library for working with PDF files, PyPDF, arises from improper processing of highly compressed input data. This vulnerability allows attackers to cause service failures.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to improper processing of highly compressed input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to the lack of measures taken to protect the structure of web pages, allows a violator to execute arbitrary code.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability may allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of the skb_gro_receive() function in Linux operating systems allows a hacker to obtain root privileges.

The vulnerability of the skbgroreceive function in Linux operating systems is related to the possibility of using memory after it has been freed. Exploiting this vulnerability can allow an attacker to gain root privileges...

The vulnerability of the network routing implementation software on Unix-like systems, related to the handling of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the FRRouting software implementation for Unix-like systems relates to the handling of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the formLogout() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a intruder to trigger a service failure.

The vulnerability of the formLogout function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure...

The vulnerability of the formrefresh() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formrefresh function in the microprogramming software of Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Drupal CMS system’s kernel allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the Drupal CMS system’s kernel is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting XSS attacks remotely...

The vulnerability of the Go programming language’s crypto/x509 package allows attackers to carry out “man-in-the-middle” type attacks.

The vulnerability of the Go programming language’s crypto/x509 package is related to errors in the certificate validation process. Exploiting this vulnerability could allow a malicious actor to carry out “man-in-the-middle” attacks...

The vulnerability of the libexpat XML file analysis library, related to the swapping of the zero pointer, allows an attacker to trigger a service failure.

The vulnerability of the libexpat library for analyzing XML files is related to the use of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Python library for working with PDF files, PyPDF, arises from improper processing of highly compressed input data. This vulnerability allows attackers to cause service failures.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to incorrect processing of highly compressed input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Zabbix IT-infrastructure monitoring system, related to the implementation or modification of arguments, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Zabbix IT-infrastructure monitoring system is related to the implementation or modification of arguments. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the RoundCube Webmail email client, related to the use of an unprotected alternative channel, allows attackers to gain unauthorized access to protected information.

The vulnerability of the RoundCube Webmail email client is related to the use of an unprotected alternative communication channel. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the dwg_next_entity() function in the LibreDWG form processing library allows a hacker to cause a service failure.

The vulnerability of the dwgnextentity function in the library for processing DWG format files by LibreDWG is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the bit_convert_TU() function in the LibreDWG form processing library allows a perpetrator to cause service interruptions.

The vulnerability of the bitconvertTU function in the LibreDWG form processing library is related to the issue of the operation exceeding the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the formiNICbasic() function in the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to inject arbitrary commands.

The vulnerability of the formiNICbasic function in the microprogramming-based router EDIMAX BR-6478AC lies in the lack of measures taken to neutralize special elements in the output data. Exploiting this vulnerability allows a remote attacker to inject arbitrary commands...

The vulnerability of the formiNICSiteSurvey() function in the microprogramming software for EDIMAX BR-6478AC allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formiNICSiteSurvey function in the microprogramming software for EDIMAX BR-6478AC routers lies in the fact that the operation’s output is stored outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality,...

The vulnerability of the formConnectionSetting() function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers allows a hacker to execute arbitrary code.

The vulnerability of the formConnectionSetting function in the microprogramming software for Edimax EW-7438RPn wireless signal amplifiers is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the aiohttp HTTP client, related to unlimited resource distribution, allows attackers to cause service failures.

The vulnerability of the aiohttp HTTP client is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the Glances monitoring tool lies in the lack of protection for service data, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Glances monitoring tool is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker who operates remotely to gain unauthorized access to protected information...

The vulnerability of the Python library for working with PDF files, PyPDF, related to unlimited resource distribution, allows a hacker to cause a service failure.

The vulnerability of the Python library for working with PDF files, PyPDF, is related to the unlimited distribution of resources. Exploiting this vulnerability can allow an attacker to cause service failures...