EUVD-2026-81753

In the Linux kernel, the following vulnerability has been resolved: lwtbpf: Restore reserved headroom after xmit program ipfinishoutput2 expands an skb to LLRESERVEDSPACEdev before LWT xmit. An LWTXMIT BPF program can then modify the skb head and still return BPFOK, so bpfxmit rechecks the...

EUVD-2026-81939

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: fix length calculations and avoid invalid header warnings syzbot reported a warning in skbnetworkheaderlen triggered by tcfskbmodact: !skbtransportheaderwassetskb WARNING: CPU: 0 PID: 14949 at...

CVE-2026-90078 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: fix length calculations and avoid invalid header warnings syzbot reported a warning in skbnetworkheaderlen triggered by tcfskbmodact: !skbtransportheaderwassetskb WARNING: CPU: 0 PID: 14949 at...

CVE-2026-90078 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings

In the Linux kernel, the following vulnerability has been resolved: net/sched: actskbmod: fix length calculations and avoid invalid header warnings syzbot reported a warning in skbnetworkheaderlen triggered by tcfskbmodact: !skbtransportheaderwassetskb WARNING: CPU: 0 PID: 14949 at...

WebKitGTK-DND-Fix

WebKitGTK-DND-Fix Cuaderno de investigación y CI para restaurar el arrastrar y soltar confiable de archivos en WebKitGTK y WPE tras CVE-2025-13947. El problema CVE-2025-13947 WSA-2025-0009, GHSA-j77f-3hf7-7rvg permitía que el contenido web leyera archivos locales mediante arrastrar y soltar en...

BIT-MONGODB-2026-18690 Improper Authorization in MongoDB Server Allows Unauthorized Actions on System Collections

An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit. This could result in critical system collections being dropped and recreated without proper...

UBUNTU-CVE-2026-82720

NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths i.e., RPZ drop query, jostle due to heavy traffic, a dropped DoH stream brings down the whole DoH session and does n...

cve-2026-80428-ctf

Laboratorio de entrenamiento CTF CVE-2026-80428 Emulador educativo de CVE-2026-80428 CWE-502: Deserialización de datos no confiables. Esto no es una instalación real de ILIAS y no es un paquete de exploit armado. Es un laboratorio completamente contenedorizado y aislado para estudiantes e...

CVE-2026-92030

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component...

jsch

Fork de JSch-0.1.55 Ver el README original ¿Por qué deberías usar esta librería? Como expliqué en un artículo de blog, los puntos principales son: OpenSSH ha deshabilitado ssh-rsa en la versión 8.8 por defecto y necesitas una librería que admita rsa-sha2-256 y rsa-sha2-512. Reemplazo directo: sol...

CVE-2025-8088-WinRAR-builder

CVE-2025-8088-WinRAR-builder Un exploit POC para la vulnerabilidad de WinRAR CVE-2025-8088 que afecta a las versiones 7.12 y anteriores 🚀 Cómo funciona 1. Crea un RAR incrustado con otros payloads 2. Usa múltiples flujos ADS 🔄 - Adjunta flujos de payload con diferentes profundidades de path...

EUVD-2026-80408

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix the case that vm range is hole at svmmigratecopytovram When migration vm range is hole at cpu sideMIGRATEPFNMIGRATE set + MIGRATEPFNVALID unset driver still allocates device pages. There is no dma map of src pages...

EUVD-2026-80590

When specific platforms are using Arista EOS with a loose Unicast Reverse Path Forwarding uRPF configuration, certain traffic may not be subjected to the intended verification drop. Consequently, traffic that should be dropped based on these routes could still be processed and forwarded by the...

CVE-2026-73469

Arista EOS on 7050X4 and 7358X4 series platforms running EOS 4.35.4M or below in the 4.35.x train is affected by a loose Unicast Reverse Path Forwarding (uRPF) bypass (CWE-863). When loose-mode uRPF is configured on an interface, certain traffic that should be dropped based on route verification ...

CVE-2026-82720

NLnet Labs Unbound versions 1.12.0 through 1.26.0 contain a use-after-free vulnerability in the DNS-over-HTTPs (DoH) code path when compiled with --with-libnghttp2. During failure code paths (e.g., RPZ drop query or jostle due to heavy traffic), a dropped DoH stream tears down the entire DoH sess...

UBUNTU-CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component...

DEBIAN-CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92030

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...