CVE-2026-93128

A flaw was found in the Linux kernel's lg-laptop driver. This issue occurs due to improper handling of LED Light Emitting Diode resources, where the system attempts to access an LED device that has not been properly registered or has already been unregistered. This improper resource management...

CVE-2026-93124

A flaw was found in the Linux kernel's asus-wireless driver. When the driver is force-bound to a device lacking an ACPI Advanced Configuration and Power Interface companion object, it can lead to a NULL pointer dereference. This occurs because the asuswirelessprobe function incorrectly stores a...

CVE-2026-93182

A flaw was found in the Linux kernel. A local user can trigger a divide-by-zero error in the scheduler's fair scheduling class sched/fair due to an unsigned 32-bit integer u32 overflow in the updatetgcfsrunnable function. This overflow corrupts internal scheduling data, leading to an invalid...

CVE-2026-93177

A flaw was found in the Linux kernel's AMD GPU powerplay module. This vulnerability arises from missing bounds checks when processing voltage indices from VBIOS-parsed tables. An attacker could potentially exploit this by providing specially crafted VBIOS data, leading to an out-of-bounds read...

CVE-2026-93171

A flaw was found in the Linux kernel's leds: lp5860 component. This vulnerability occurs when the lp5860deviceinit function attempts to unlock a mutex that has already been released, specifically if the lp5860initdt function fails. Such a double-unlock operation can lead to unexpected system...

CVE-2026-93153

A flaw was found in the Linux kernel's RDMA/bngre component. This vulnerability occurs when the waitforresp function fails to properly handle firmware responses that stall, causing it to ignore timeout expiry. A local attacker could exploit this by triggering a stalled firmware response, leading ...

CVE-2026-93135

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF. When the Just-In-Time JIT compiler is unavailable or fails, BPF programs that use inlined helper functions are processed by the interpreter with unpatched helper identifiers. This incorrect processing can lead to an instruction...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

CVE-2026-65650

CVE-2026-65650 — PoC: Authenticated DoS in Elgg Avatar Upload Authenticated denial of service in Elgg's avatar upload feature via unbounded image dimensions, causing GD memory exhaustion. Affected: Elgg saveIconFromUploadedFile'avatar' return elggerrorresponseelggecho'avatar:resize:fail'; PHP's G...

CVE-2026-113619

In Eclipse ioFog Controller versions 3.8.0 through 3.9.1, POST, PUT, and PATCH bodies on routes that enable template substitution are rendered by an uncapped Liquid engine before authentication and RBAC. The bearer check does not reject a missing or invalid token, and the auth rate limit applies...

Tomcat-CVE-2025-31650

CVE-2025-31650 🚨 Proof of Concept PoC for Apache Tomcat HTTP/2 DoS vulnerability CVE-2025-31650 This script triggers a memory exhaustion condition in Apache Tomcat by sending malformed priority headers over HTTP/2. 🎯 Affected Versions Apache Tomcat 9.0.76 – 9.0.102 Apache Tomcat 10.1.10 – 10.1.39...

CVE-2022-26937

Windows Network File System Crash PoC CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. The...

CVE-2026-93115

A flaw was found in the Linux kernel's Mellanox mlxbf-pmc driver. A local attacker could exploit this by forcing the driver to bind to a device lacking an ACPI Advanced Configuration and Power Interface companion object. This action triggers a NULL pointer dereference, which can lead to a system...

CVE-2026-93062

A flaw was found in the Linux kernel's iwlwifi driver. This vulnerability is caused by a division-by-zero error within the iwldbgtlvallocfragments function when the number of fragments is zero. This could lead to a system crash, resulting in a Denial of Service DoS...

CVE-2026-93118

A flaw was found in the Linux kernel's USB gadget driver for Aspeed UDC. During the device initialization process, a failure to allocate a Direct Memory Access DMA buffer is not properly handled. This can lead to the driver attempting to use an invalid memory address, potentially causing a system...

CVE-2026-93114

A flaw was found in the Linux kernel. A vulnerability exists in the platform/surface: acpi-notify component where a platform driver can be forced to match a device lacking an ACPI companion object. This can lead to a NULL pointer dereference when the sanprobe function attempts to access a...

CVE-2026-93113

A flaw was found in the Linux kernel, specifically within the camcc-sc8280xp component of its clock clk and power management domain pmdomain subsystems. This issue arises when unused clocks are shut down, leading to a synchronization problem where the titantopgdsc status remains 'on'. This can...

CVE-2026-93108

A flaw was found in the Linux kernel's RDMA/ipoib module. A race condition during module teardown allows the ibipoib module to be unloaded while its code is still executing. This can occur when IPoIB reclamation completions are signaled from within an RCU Read-Copy-Update callback, or during clie...

CVE-2026-93107

A flaw was found in the Linux kernel's RDMA/rxe component. When a Queue Pair QP transitions to an error state during packet completion, the system may reprocess an already-completed packet. This can lead to duplicate data being delivered to user applications, causing data stream corruption...

CVE-2026-93096

A flaw was found in the Linux kernel's CXL features. A concurrency vulnerability exists where multi-part Get/Set Feature transfers are not properly serialized. This allows two concurrent transfers to the same mailbox to interleave their parts, which can corrupt the device's transfer context. A...