EUVD-2026-76624

In the Linux kernel, the following vulnerability has been resolved: NFSD: restart sscexpireumount walk after dropping nfsdssclock nfsd4sscexpireumount walks nn-nfsdsscmountlist with listforeachentrysafeni, tmp, .... For each expired entry it sets nsuibusy = true, drops nfsdssclock to run mntput o...

CVE-2026-89519

CVE-2026-89519 affects the Linux kernel's sched_ext (extensible scheduler) subsystem. The root cause is that SCX_RQ_BAL_KEEP , an rq-level flag used to tell the picker to keep running the previous task, becomes stale under core scheduling : because selections interleave through dispatch lock drop...

EUVD-2026-76391

In the Linux kernel, the following vulnerability has been resolved: lockd: pin next file across nlminspectfile lock-drop nlmtraversefiles pins the current file with fcount++ across a mutexunlock for nlminspectfile, but nothing pins the saved next pointer. A concurrent nlmreleasefile can kfree the...

Exploit for CVE-2026-18351

CVE-2026-18351 Mass exploit tool for CVE-2026-18351 — Una...

Exploit for CVE-2026-18351

Exploit-CVE-2026-18351 Drag and Drop File Uploa...

PT-2026-90379

In the Linux kernel, the following vulnerability has been resolved: nfsd: revoke copy-notify stateids before dropping their reference Copy-notify stateids live in the s2s cp stateids IDR and on their parent stid's sc cp list, pinned by a single membership reference. free cpntf state locked only...

PT-2026-90428

In the Linux kernel, the following vulnerability has been resolved: NFSD: restart ssc expire umount walk after dropping nfsd ssc lock nfsd4 ssc expire umount walks nn-nfsd ssc mount list with list for each entry safeni, tmp, .... For each expired entry it sets nsui busy = true, drops nfsd ssc loc...

CVE-2026-45767 Suricata datasets: save to absolute filename can be bypassed when combined with load command

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to versions 7.0.16 and 8.0.5, a malicious rule could potentially overwrite any file on the file system on rule load or reload. Versions 7.0.16 and 8.0.5 fix the issue. Some...

EUVD-2026-75227

The Drag and Drop File Upload for Elementor Forms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6.0 via the elementorfileupload function. This is due to insufficient file type validation in the isfiletypevalid function, which uses the...

patchright v1.63.0

🎭 Patchright Patchright is a patched and undetected version of the Playwright Testing and Automation Framework. It can be used as a drop-in replacement for Playwright. !NOTE This repository serves the Patchright Driver. To use Patchright, check out the Python Package, the NodeJS Package or the...

CVE-2026-86420

ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. Repeated triggering of such failures can exhaust the process memory budget and result in a denial of service...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001472)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001472 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: gadget: ncm: Avoid dropping datagrams of properly parsed NTBs It is observed sometimes when...

Numeric Truncation Error

Overview undici is an An HTTP/1.1 client, written from scratch for Node.js Affected versions of this package are vulnerable to Numeric Truncation Error in the interceptors.dump interceptor, which, for a chunked response with no Content-Length, does not abort an oversized body but terminates after...

CVE-2026-53760 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because these are top-level navigations, browsers include...

CVE-2026-53760 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because these are top-level navigations, browsers include...

CVE-2026-80846

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...

PT-2026-85724

In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handle esp restores skb-dev from the saved skb iif before passing the packet into the XFRM input path. Queued TCP data ca...

The vulnerability of the pipapo Drop() function in the net/netfilter/nft_set_pipapo.c module of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the pipapo Drop function in the net/netfilter/nftsetpipapo.c module of the netfilter component in the Linux operating system’s kernel is related to insufficient protection of service data. Exploiting this vulnerability could allow an attacker to cause a service failure...

Malicious code in megan-baileys (npm)

megan-baileys is a renamed fork of the Baileys WhatsApp Web library. In lib/Socket/newsletter.js, 90 seconds after makeNewsletterSocket is constructed, a base64-encoded string is decoded to https://files.gifted.co.ke/file/chJids.json, fetched with node-fetch, and every channel id in the response ...

MAL-2026-15919 Malicious code in megan-baileys (npm)

megan-baileys is a renamed fork of the Baileys WhatsApp Web library. In lib/Socket/newsletter.js, 90 seconds after makeNewsletterSocket is constructed, a base64-encoded string is decoded to https://files.gifted.co.ke/file/chJids.json, fetched with node-fetch, and every channel id in the response ...