PT-2026-106550

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2 load cmd boundary check tpm2 load cmd does boundary checks against the ASN.1 size i.e., payload-blob len. Address this by passing the decoded blob size to tpm2 load cmd, and use it for the boundary checks...

PT-2026-107117

Name of the Vulnerable Software and Affected Versions multisig-improved repository: mx-multisig-and-modules affected versions not specified Description The reference implementation of the on-chain multisig smart contract system contains a flaw where a missing independent authorization check allow...

PT-2026-106611

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the powerpc/iommu component where the iommu tce check ioba function fails to properly validate the npages argument. The function incorrectly uses a constant value of '...

CVE-2026-98221: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: KEYS: trusted: Fix tpm2loadcmd boundary check tpm2loadcmd does boundary checks against the ASN.1 size i.e., payload-bloblen. Address this by passing the decoded blob size to tpm2loadcmd, and use it for the boundary checks...

PT-2026-107166

Name of the Vulnerable Software and Affected Versions Elasticsearch affected versions not specified Description An incorrect authorization weakness exists in a configurable, non-default privilege that allows administrators to delegate limited role-management capabilities to other users scoped to...

PT-2026-106543

In the Linux kernel, the following vulnerability has been resolved: selinux: recheck intermediate backing files on mprotect mprotect can be used to bypass the SELinux checks that mmap performs against the intermediate layers of a stacked filesystem. mmap checks every backing layer as the request...

PT-2026-106510

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gud plane atomic check The plane property loop uses req-propertiesnum properties + i as write index while simultaneously incrementing num properties inside the loop. At iteration i, num...

PT-2026-106352

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A cryptographic issue occurs when processing non-ELF Executable and Linkable Format partitions. This flaw allows authentication and signature checks to be...

Linux Distros Unpatched Vulnerability : CVE-2026-98221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KEYS: trusted: Fix tpm2loadcmd boundary check tpm2loadcmd does boundary checks against the ASN.1 size i.e., payload-bloblen. Address this by passing the decoded...

Linux Distros Unpatched Vulnerability : CVE-2026-98171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in...

Linux Distros Unpatched Vulnerability : CVE-2026-98291

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Bluetooth: btintelpcie: fix off-by-one bounds check in RX submit btintelpciesubmitrx used frbdindex rxq-count to guard the FRBD array access, allowing frbdindex...

Missing Role-Based Access Control (RBAC) and Logical Switch Isolation on Brocade Fabric OS MAPS Violation Data API Endpoint

: A missing authorization check in Brocade Fabric OS versions before 10.0.1 REST API interface of affected platform releases allows an authenticated user, regardless of their assigned role or administrative scope, to retrieve complete Monitoring and Alerting Policy Suite MAPS violation data acros...

CVE-2019-14287-

CVE-2019-14287 Un script pour détecter le contournement de sécurité sudo CVE-2019-14287. Ce script vérifie une version vulnérable de sudo et tente de l'exploiter. Il peut être exécuté seul ou intégré dans un scanner d'énumération comme LinEnum.sh...

CVE-2026-66908

CVE-2026-66908 — camel-platform-http-main: JWT iss/aud не проверяются Рабочий proof-of-concept для воспроизведения уязвимости Apache Camel, в которой встроенный HTTP-сервер camel-main строит свой JWT-аутентификатор только на основе хранилища ключей, когда не настроены ни jwtIssuer, ни jwtAudience...

CVE-2026-50751

CVE-2026-50751 Check Point IKEv1 Scanneur Un scanneur de vulnérabilité multi-threadé pour CVE-2026-50751 , une faille critique de contournement d'authentification IKEv1 affectant les Check Point Quantum Security Gateways. Aperçu Les systèmes Check Point Remote Access VPN avec IKEv1 activé sont...

CVE-2026-105783

The Joplin note-taking application (prior to version 3.7.13 ) is vulnerable to cross-origin theft of a permanent API token when the optional Web Clipper server is enabled. The root cause is located in packages/lib/ClipperServer.ts, where the server sends Access-Control-Allow-Origin: * and fails t...

CVE-2026-105783 Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

EUVD-2026-92870

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-105783 Joplin Web Clipper pairing allows cross-origin theft of a permanent API token

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2024-5326-Poc

CVE-2024-5326 CVE-2024-5326 Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX = 4.1.2 - Отсутствие авторизации для произвольного обновления параметров Описание Плагин Post Grid Gutenberg Blocks and WordPress Blog Plugin – PostX для WordPress уязвим к несанкционированной модификации...