Aggregator

A vulnerability was found in Linux Kernel up to 6.0.7. It has been classified as problematic. The impacted element is the function null_blk.ko. This manipulation causes allocation of resources. The identification of this vulnerability is CVE-2022-49901. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.0.7. Impacted is the function kvm_gpc_check of the component KVM. Such manipulation leads to use after free. This vulnerability is listed as CVE-2022-49882. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 4.19.266/5.4.224/5.10.154/5.15.78/6.0.8. It has been declared as critical. Affected by this vulnerability is the function query_regdb_file of the component wifi. Executing a manipulation of the argument alpha2 can lead to memory leak. The identification of this vulnerability is CVE-2022-49881. The attack needs to be done within the local network. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.0.7. It has been rated as problematic. Affected is the function ext4_da_release_space of the component ext4. This manipulation causes allocation of resources. This vulnerability appears as CVE-2022-49880. The attacker needs to be present on the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability classified as critical has been found in Dataease up to 2.10.19. The affected element is the function getJdbcIniFile of the file rsjdbc.ini of the component JDBC Driver. The manipulation of the argument IniFile leads to path traversal. This vulnerability is documented as CVE-2026-32140. The attack can be initiated remotely. There is not any exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in Dataease up to 2.10.19. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Static Resource Upload Interface. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2026-32139. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability categorized as critical has been discovered in parse-community parse-server up to 8.6.37/9.6.0-alpha.11. This issue affects some unknown processing. Such manipulation leads to improper neutralization of special elements in data query logic. This vulnerability is referenced as CVE-2026-32248. It is possible to launch the attack remotely. No exploit is available. It is advisable to upgrade the affected component.

A vulnerability described as problematic has been identified in louislam uptime-kuma up to 2.1.x. This affects an unknown function of the file /api/badge/ of the component Ping Endpoint. The manipulation results in missing authorization. This vulnerability is cataloged as CVE-2026-32230. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability classified as critical was found in GL-iNet GL-AR300M16 4.3.11. Affected is the function set_config. Such manipulation leads to command injection. This vulnerability is documented as CVE-2026-26793. The attack can be executed remotely. There is not any exploit available.

A vulnerability, which was classified as problematic, was found in parse-community parse-server up to 8.6.36/9.0.0 9.6.0-alpha.10. Affected by this issue is some unknown functionality. Executing a manipulation can lead to race condition. This vulnerability appears as CVE-2026-32242. The attack may be performed from remote. There is no available exploit. You should upgrade the affected component.

A vulnerability was found in Asseco SEE Live 2.0. It has been declared as critical. This affects the function downloadAttachment/downloadAttachmentFromPath of the component SMS/Fax. Executing a manipulation of the argument path can lead to file inclusion. This vulnerability is handled as CVE-2025-66955. The attack can be executed remotely. There is not any exploit available.

A vulnerability identified as problematic has been detected in tolgee tolgee-platform up to 3.166.2. Affected by this vulnerability is an unknown functionality of the component XML Parser. This manipulation causes xml external entity reference. The identification of this vulnerability is CVE-2026-32251. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This issue affects some unknown processing of the file /goform/formSetWizardSelectMode. The manipulation of the argument curTime leads to stack-based buffer overflow. This vulnerability is listed as CVE-2025-70245. The attack may be initiated remotely. There is no available exploit.

嗯，用户让我总结一下这篇文章的内容，控制在一百个字以内，而且不需要用“文章内容总结”之类的开头。首先，我需要快速浏览一下文章内容。看起来这篇文章是关于如何学习道德黑客的，提到了很多资源和建议。 文章里提到首先要学网络基础，推荐了CompTIA的认证和Cisco的免费课程。然后是实践平台，比如TryHackMe、Hack The Box和OverTheWire.org。工具方面提到了Nmap、Metasploit和Burp Suite，还有学习Linux的重要性。此外还有YouTube频道和PortSwigger Academy这些资源，以及参与相关的Subreddit社区。 现在我要把这些信息浓缩到100字以内。要抓住主要点：资源包括认证课程、实践平台、工具、在线资源和社区支持。同时强调打好基础的重要性。 可能的结构是：介绍学习道德黑客需要掌握的基础知识，推荐的资源包括认证课程、实践平台、工具和技术，并提到参与社区的重要性。 最后检查一下字数，确保不超过限制，并且表达清晰简洁。 学习道德黑客需掌握基础知识与实用技能，推荐通过CompTIA认证、Cisco免费课程打牢基础，利用TryHackMe、Hack The Box等平台实践，熟悉Nmap、Metasploit等工具，并参与相关社区提升技能。

A vulnerability, which was classified as problematic, was found in unjs unhead up to 2.1.10. The affected element is the function useHeadSafe of the component HTML Attribute Handler. The manipulation results in HTML injection. This vulnerability is known as CVE-2026-31860. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

A vulnerability was found in inspektor-gadget up to 0.50.0. It has been declared as critical. Affected is the function gadget_reserve_buf in the library include/gadget/buffer.h. Executing a manipulation can lead to omission of security-relevant information. The identification of this vulnerability is CVE-2026-31890. The attack can only be executed locally. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability categorized as critical has been discovered in Dataease up to 2.10.19. Affected by this issue is some unknown functionality of the file /de2api/datasource/previewData. The manipulation of the argument table results in sql injection. This vulnerability is identified as CVE-2026-32137. The attack can be executed remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability described as critical has been identified in GL-iNet GL-AR300M16 4.3.11. Impacted is the function set_upgrade. Executing a manipulation of the argument modem_url/target_version/current_version/firmware_upload/hash_type/hash_value/upgrade_type can lead to command injection. This vulnerability is registered as CVE-2026-26792. It is possible to launch the attack remotely. No exploit is available.

A vulnerability classified as critical was found in GL-iNet GL-AR300M16 4.3.11. The impacted element is the function enable_echo_server. The manipulation results in command injection. This vulnerability is reported as CVE-2026-26791. The attack can be launched remotely. No exploit exists.

A vulnerability, which was classified as critical, was found in GL-iNet GL-AR300M16 4.3.11. This impacts the function add_group of the component HTTP Handler. Such manipulation leads to sql injection. This vulnerability is traded as CVE-2026-26794. The attack may be launched remotely. There is no exploit available.