id: groups= computed from real GID instead of effective GID
CVE-2026-35370
The id utility in uutils coreutils miscalculates the groups= section of its output. The implementation uses a user's rea
#severity:medium
共收录 5559 条相关情报。
← 返回所有主题rm: --preserve-root bypassed via a symlink to / (string check instead of dev/inode)
CVE-2026-35349
The `--preserve-root` check uses a path-string test (`path.has_root() && path.parent().is_none()`) rather than comparing
kill: 'kill -1' parsed as PID -1, sending SIGTERM to all processes (system crash / DoS)
CVE-2026-35369
`kill -1` is incorrectly parsed as a positional `pid = -1`; combined with the default SIGTERM this calls `kill(-1, SIGTE
install -D: symlink race in directory creation allows arbitrary file overwrite
CVE-2026-35356
The `-D` path runs `fs::create_dir_all` on a pathname then later opens the destination via path-based `File::create`/`fs
install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite
CVE-2026-35355
`copy_file` in `install/src/install.rs` removes the destination then recreates it by pathname via `File::create` / `fs::
chmod: recursive mode returns exit code 0 even when some files fail (last-file-wins)
CVE-2026-35339
In `Chmoder::chmod()` the recursive branch overwrites the running result instead of accumulating it, so the exit code re
The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored...
CVE-2026-12154
The Reviews Widgets for Google, Yelp & TripAdvisor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function...
CVE-2026-14784
A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pk
Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site...
CVE-2026-59520
Cross-Site Request Forgery (CSRF) vulnerability in properfraction CrawlWP SEO allows Cross Site Request Forgery. This i
A security vulnerability has been detected in SourceCodester Onlne Examination & Learning...
CVE-2026-14778
A security vulnerability has been detected in SourceCodester Onlne Examination & Learning Management System 1.0. This af
Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows...
CVE-2026-59519
Insertion of Sensitive Information Into Sent Data vulnerability in Softaculous FormLayer allows Retrieve Embedded Sensit
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The...
CVE-2026-14772
A vulnerability has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The impacted element is an
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected...
CVE-2026-14771
A flaw has been found in SourceCodester Class and Exam Timetabling System 1.0/1.php. The affected element is an unknown
Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons...
CVE-2026-59511
Insertion of Sensitive Information Into Sent Data vulnerability in Tim Strifler Exclusive Addons Elementor allows Retrie
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is...
CVE-2026-14770
A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Impacted is an unknown function of
A weakness has been identified in code-projects Real State Services 1.0. This vulnerability...
CVE-2026-14768
A weakness has been identified in code-projects Real State Services 1.0. This vulnerability affects unknown code of the
A security vulnerability has been detected in code-projects Real State Services 1.0. This issue...
CVE-2026-14769
A security vulnerability has been detected in code-projects Real State Services 1.0. This issue affects some unknown pro
A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown...
CVE-2026-14763
A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. This affects an unknown function of the file /
A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted...
CVE-2026-14762
A vulnerability was detected in code-projects Hotel and Tourism Reservation 1.0. The impacted element is an unknown func
A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts...
CVE-2026-14764
A vulnerability has been found in code-projects Hotel and Tourism Reservation 1.0. This impacts an unknown function of t