Aggregator

享积分、拿补贴、评职称，一步到位

XFS文件系统竞态条件，本地提权至root

看雪论坛作者ID：北袅

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

A vulnerability, which was classified as critical, was found in Ultimate Member Plugin up to 2.5.0 on WordPress. Affected by this issue is the function load_template of the file includes/core/class-shortcodes.php of the component Template Handler. Executing a manipulation of the argument tpl can lead to pathname traversal. The identification of this vulnerability is CVE-2022-3966. The attack may be launched remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as problematic was found in ffmpeg. Affected is an unknown function of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder. Such manipulation of the argument y_size leads to out-of-bounds read. This vulnerability is uniquely identified as CVE-2022-3964. The attack can be launched remotely. No exploit exists. It is best practice to apply a patch to resolve this issue.

A vulnerability, which was classified as problematic, has been found in ffmpeg. Affected by this vulnerability is the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. Performing a manipulation of the argument y_size results in out-of-bounds read. This vulnerability was named CVE-2022-3965. The attack may be initiated remotely. There is no available exploit. It is recommended to apply a patch to fix this issue.

A vulnerability marked as problematic has been reported in gnuboard5 5.3.1.6/5.3.1.9/5.3.2.0. The impacted element is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting. This vulnerability is traded as CVE-2022-3963. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

A critical authentication bypass vulnerability affecting Check Point SmartConsole has been actively exploited in the wild, allowing attackers to gain unauthorized access to security management systems under specific configurations. The flaw, tracked as CVE-2026-16232, carries a CVSS score of 9.3 and impacts Check Point Security Management and Multi-Domain Management deployments, particularly when management interfaces are […]

The post Critical Check Point SmartConsole Flaw Exploited in the Wild to Bypass Authentication appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

美国国会议员参加模拟干扰美军部署的AI网络战兵棋推演

汽车经销商预装的KARR报警系统存在严重漏洞

И это статистика не по разовым установкам, а по ежедневному возвращению пользователей.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.18.16/6.19.6/7.0-rc2. Affected by this issue is the function xa_store of the component reg_sr. The manipulation results in allocation of resources. This vulnerability is reported as CVE-2026-23418. The attacker must have access to the local network to execute the attack. No exploit exists. The affected component should be upgraded.

A vulnerability described as critical has been identified in Linux Kernel up to 6.12.79/6.18.20/6.19.10/7.0-rc4. The impacted element is the function bpf_jit_blind_insn of the component bpf. Executing a manipulation can lead to privilege escalation. This vulnerability is handled as CVE-2026-23417. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.18.20/6.19.10/7.0-rc5. Affected by this vulnerability is the function futex_key_to_node_opt of the file kernel/futex/core.c. Such manipulation leads to use after free. This vulnerability is referenced as CVE-2026-23415. The attack needs to be initiated within the local network. No exploit is available. You should upgrade the affected component.

A vulnerability has been found in Linux Kernel up to 6.18.20/6.19.10/7.0-rc5 and classified as critical. Affected by this issue is the function vma_modify_flags. Performing a manipulation results in excessive iteration. This vulnerability is identified as CVE-2026-23416. The attack can only be performed from the local network. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as critical was found in Linux Kernel up to 6.6.129/6.12.77/6.18.19/6.19.9/7.0-rc4. This impacts the function clsact_init. The manipulation results in use after free. This vulnerability was named CVE-2026-23413. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.130/6.12.79/6.18.20/6.19.10/7.0-rc5. Affected is the function tls_decrypt_async_wait. This manipulation causes information disclosure. The identification of this vulnerability is CVE-2026-23414. The attack needs to be done within the local network. There is no exploit available. It is advisable to upgrade the affected component.