kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

EUVD-2026-34161

Version 3.0.7 of the Securly Chrome Extension downloads JSON files containing crisis alert keywords and filtering rules over unencrypted HTTP via the Fetch API. Other endpoints in the same extension correctly fetch IWF and CIPA data over HTTPS, demonstrating an inconsistent implementation of TLS...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

Online Safety Regulation Increases Privacy Risk: Evidence from the UK Online Safety Act

Governments worldwide are increasingly regulating digital platforms to reduce online harms, particularly those affecting children. However, access restrictions can alter user behaviour and introduce new privacy and security risks. The UK Online Safety Act OSA, passed in October 2023, illustrates...

snyk-agentic-appsec-poc

Snyk Agentic AppSec POC Proof of concept demonstrating autono...

CVE-2018-25409

SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksipengurus.php endpoint with module=pengurus and act=update parameters, which...

CVE-2018-25409 SIM-PKH 2.4.1 Arbitrary File Upload via aksi_pengurus.php

SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter. Attackers can upload PHP files via the aksipengurus.php endpoint with module=pengurus and act=update parameters, which...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

CERTFR-2026-ACT-023

creationtimestamp| type| source ---|---|--- 2026-05-26 13:19:22+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3mmr3fxtj3v2b 2026-05-26 13:19:41+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/116641075124338987...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, apko, kaniko, gitea, nfpm, bom, gptscript, witness, trivy, flux-image-automation-controller, scorecard, argo-cd, grafana-alloy, kubevela, wolfictl, gitlab-runner, grype, argo-events, flux, guac, steampipe, teleport, gitaly, zarf, zot, rancher-flee...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, apko, kaniko, gitea, nfpm, bom, gptscript, witness, trivy, flux-image-automation-controller, scorecard, argo-cd, grafana-alloy, kubevela, wolfictl, gitlab-runner, grype, argo-events, flux, guac, steampipe, teleport, gitaly, zarf, zot, rancher-flee...

CVE-2026-45570 vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, apko, kaniko, gitea, nfpm, bom, gptscript, witness, trivy, flux-image-automation-controller, scorecard, argo-cd, grafana-alloy, kubevela, wolfictl, gitlab-runner, grype, argo-events, flux, guac, steampipe, teleport, gitaly, zarf, zot, rancher-flee...

CVE-2026-45571 vulnerabilities

Vulnerabilities for packages: snyk-cli, gomplate, apko, kaniko, gitea, nfpm, bom, gptscript, witness, trivy, flux-image-automation-controller, scorecard, argo-cd, grafana-alloy, kubevela, wolfictl, gitlab-runner, grype, argo-events, flux, guac, steampipe, teleport, gitaly, zarf, zot, rancher-flee...

GHSA-M7CR-M3PV-HGRP vulnerabilities

Vulnerabilities for packages: crossplane, chainloop-cli-fips, xeol, src-fingerprint-fips, terragrunt-fips, gitea, external-secrets-operator, grype-db, act, snyk-cli, cerbos, flux-image-automation-controller-fips, jfrog-cli, amazon-ssm-agent, argo-workflows-fips, kubevela-fips, mapotf,...

GHSA-CRHJ-59GH-8X96 vulnerabilities

Vulnerabilities for packages: crossplane, chainloop-cli-fips, xeol, src-fingerprint-fips, terragrunt-fips, gitea, external-secrets-operator, grype-db, act, snyk-cli, cerbos, flux-image-automation-controller-fips, jfrog-cli, amazon-ssm-agent, argo-workflows-fips, kubevela-fips, mapotf,...

kernel: Linux kernel: Use-after-free in traffic control (act_ct) may lead to denial of service or privilege escalation

A flaw was found in the Linux kernel. A use-after-free vulnerability exists in the traffic control actct path when it is incorrectly configured with non-ingress egress qdiscs queueing disciplines. This can allow a local user with specific privileges to trigger a kernel crash, leading to a denial ...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/sched: actapi: avoid dereferencing ERRPTR in tcfidrinfodestroy. The syzbot reported a crash in tcactinHW during the netns teardown process. In this case, tcfidrinfodestroy passed a value of ERRPTR-EBUSY as a pointer to...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fixed the internal port memory leak. The flow rule can be split, and additional postact rules are added to the postact table. It’s possible to trigger a memory leak when the rule forwards packets from an internal port...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: veth: Ensure that the eth header is in the linear part of the skb structure. After feeding a decapsulated packet to a veth device using actmirred, skbheadlen might be set to 0. However, vethxmit calls devforwardskb, which expects...