Exploit for Use After Free in Linux Linux_Kernel

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文READ...

OPENSUSE-SU-2026:21878-1 Security update for ruby3.4

This update for ruby3.4 fixes the following issues: - CVE-2025-58767: denial of service when parsing XML containing multiple XML declarations bsc1250016. - CVE-2026-27820: insufficient checks in zstreambufferungets can lead to a buffer overflow bsc1259239. - CVE-2026-41316: erb: @init...

Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

Caddy v2.11.3 — Three vulnerabilities in handler/placeholder layer Tested against: caddy:2.11.3 official Docker image, SHA verified at runtime Reproduction environment: Docker Desktop 4.73.1 / Engine 29.4.3 on Windows 10 host, isolated containers, no network egress required for any of the exploit...

GHSA-J8PX-RMRX-76H9 Caddy: rewrite placeholder re-expansion, unbounded body buffer DoS, and fileHidden case-sensitivity bypass

Caddy v2.11.3 — Three vulnerabilities in handler/placeholder layer Tested against: caddy:2.11.3 official Docker image, SHA verified at runtime Reproduction environment: Docker Desktop 4.73.1 / Engine 29.4.3 on Windows 10 host, isolated containers, no network egress required for any of the exploit...

ghostlock-pfem10

GhostLock — OPPO Find X5 Pro PFEM10 English · 中文 GhostLock CVE-2026-43499 port for the OPPO Find X5 Pro on ColorOS 16. Reaches a uid=0 child process and a loaded kernelsu.ko; the root process is intercepted. Vulnerability CVE-2026-43499 — futex PI use-after-free. removewaiter clears...

PPPoEject

PPPoEject CVE-2026-68121 Writeuphttps://heyitsas.im/post...

openSUSE 16 Security Update : chirp (openSUSE-SU-2026:21866-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21866-1 advisory. Changes in chirp: - Update to version 20260911: ftm300d: Experimental Yaesu FTM-300DR driver Update Ukrainian localization ar8200: Fix importing memorie...

Grav CMS vulnerable to remote code execution via .zip file upload

Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...

GHSA-R94F-HX44-8JQF Grav CMS vulnerable to remote code execution via .zip file upload

Summary A logged-in user can run any command on the server. A settings field can fill itself by calling one of Grav's built-in routines, and a safety check is supposed to allow only harmless ones. The check only recognises a routine when its name is written as one piece of text; named as a pair o...

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

GHSA-XHFV-7758-R9HX Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

Summary The core Flex group blueprint system/blueprints/user/group.yaml access field, lines 48-55 omits the security@: admin.super field guard that its sibling account blueprint carries account.yaml:131/138/150, added by the CVE-2026-42613 fix. A delegated non-super operator holding...

Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

Summary Grav\Common\Twig\Twig::init unconditionally puts the raw system, site, and theme config arrays into $this-twigvars. Twig::processPage builds the variables for the sandboxed, editor-authored page-content render by copying that same base array $sandboxvars = $twigvars; and replacing only th...

GHSA-P597-CRQC-M349 Grav: The system, site, and theme Twig variables bypass the content sandbox entirely and are never covered by config_denied_paths

Summary Grav\Common\Twig\Twig::init unconditionally puts the raw system, site, and theme config arrays into $this-twigvars. Twig::processPage builds the variables for the sandboxed, editor-authored page-content render by copying that same base array $sandboxvars = $twigvars; and replacing only th...

100,000 WordPress Sites Exposed to Remote Code Execution via PHP Object Injection Vulnerability Found by Wordfence Argus in Tutor LMS

On August 23rd, 2026, Wordfence Argus, our AI research agent specializing in complex vulnerability chains, discovered a PHP Object Injection vulnerability in Tutor LMS, a WordPress e-learning plugin active on more than 100,000 websites. This vulnerability allows any authenticated attacker with...

Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation

Summary A missing validation check in Grav's Flex framework lets an account holding nothing but an ordinary object-create permission on a single Flex directory execute arbitrary shell commands on the server. Any authenticated user with create or update rights on a Flex-based directory Flex Users,...

GHSA-C4WF-2XXC-68QM Grav: FlexDirectory::dynamicDataField() executes arbitrary callables from blueprint data with no validation

Summary A missing validation check in Grav's Flex framework lets an account holding nothing but an ordinary object-create permission on a single Flex directory execute arbitrary shell commands on the server. Any authenticated user with create or update rights on a Flex-based directory Flex Users,...

Ransomware incidents in Japan in the first half of 2026: Investigation of The Gentlemen’s infrastructure and evidence of Qilin's AI use

Compared with the same period last year, ransomware incidents in Japan increased slightly by approximately 4.7%, indicating that ransomware continues to pose a significant threat. In Japan, The Gentlemen was the most active ransomware group in the first half of 2026. Attackers continue to primari...

SUSE-SU-2026:23873-1 Security update for jq

This update for jq fixes the following issues: Security issues fixed: - CVE-2015-8863: heap buffer overflow in tokenadd function bsc976992. - CVE-2023-50246: improper memory handling can lead to a heap buffer overflow in decNumberToString bsc1218034. - CVE-2023-50268: stack-based buffer overflow ...

SideCopy Threat Intel: MSHTA-driven Execution and RAT Deployment

SideCopy Threat Intel: MSHTA-driven Execution and RAT Deployment By Boggavarapu R S S Srinivas Gupta and Ravishankar N C · September 17, 2026 Introduction The modern cyber warfare landscape has evolved significantly as threat actors pivot toward simple yet highly effective and evasive malware...

Ubuntu 18.04 LTS / 26.04 LTS : python-cryptography vulnerabilities (USN-8776-1)

The remote Ubuntu 18.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8776-1 advisory. It was discovered that python-cryptography incorrectly accepted objects with immutable buffers when performing certain cipher operations. Thi...