EUVD-2026-67533

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer The management mailbox channel cleanup helpers can be called from error handling paths when mgmtchann has already been destroyed. Add NULL checks to...

CVE-2026-80650 media: atomisp: gc2235: fix UAF and memory leak

In the Linux kernel, the following vulnerability has been resolved: media: atomisp: gc2235: fix UAF and memory leak gc2235probe handles its error paths incorrectly. If mediaentitypadsinit fails, gc2235remove is called, which tears down the subdev and frees dev, but then still falls through to...

CVE-2026-80620

In the Linux kernel, the following vulnerability has been resolved: Revert "PCI/MSI: Unmap MSI-X region on error" This reverts commit 1a8d4c6ecb4c81261bcdf13556abd4a958eca202. Commit 1a8d4c6ecb4c "PCI/MSI: Unmap MSI-X region on error" added an iounmapdev-msixbase on the error path of...

Linux Distros Unpatched Vulnerability : CVE-2026-80678

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - i2c: imx: Fix slave registration race and error handling In i2cimxregslave, the slave pointer was assigned before pmruntimeresumeandget. If pmruntimeresumeandge...

EUVD-2026-67083

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2026-75159

CVE-2026-75159 affects MongoDB Connector for BI (mongosqld) deployments configured with Kerberos authentication . An unauthenticated, network-reachable client can trigger a specific GSSAPI error-handling condition during a crafted authentication exchange, causing mongosqld to terminate. This inte...

CVE-2026-75159 MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

MongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

EUVD-2026-66496

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Ignore IPC errors for pipeline state change if the firmware state is crashed or the IPC has timed out. If the firmware has crashed the kernel still needs t...

CVE-2026-80565

A flaw was found in the Linux kernel's crypto: qce component. An error in the devmqceregisteralgs function's error handling path causes the system to repeatedly attempt to unregister algorithms incorrectly when a registration fails. This improper handling of resources could lead to system...

CVE-2025-62168

CVE-2025-62168 Divulgazione di informazioni nel proxy Squid nella gestione degli errori Scanner Rilevamento e PoC "A causa di una mancata oscuramento delle credenziali di autenticazione HTTP Squid è vulnerabile a un attacco di divulgazione di informazioni. Gravità: Questo problema consente a uno...

CVE-2025-62168

CVE-2025-62168 Squid प्रॉक्सी त्रुटि प्रबंधन में सूचना प्रकटीकरण स्कैनर पहचान और PoC "HTTP प्रमाणीकरण क्रेडेंशियल्स को हटाने में विफलता के कारण Squid सूचना प्रकटीकरण हमले के प्रति संवेदनशील है। गंभीरता: यह समस्या एक स्क्रिप्ट को ब्राउज़र सुरक्षा सुरक्षाओं को बायपास करने और उन क्रेडेंशियल्स को जान...

EUVD-2026-66480

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2024-10924

CVE-2024-10924 的 PoC Really Simple Plugins WordPress 插件（版本 9.0.0 至 9.1.1.1 包括）的 REST API 中存在一个错误处理缺陷，当启用双因素身份验证时，攻击者可以绕过身份验证并控制现有用户或管理员帐户。 作为一个好人，您还会找到该插件的 9.1.1.1 版本。只需解压并上传到 wp-content/plugins 文件夹。别忘了激活插件并启用 2FA。 需求 使用 pip 安装所需的依赖项： root@kitploit: pip install -r requirements.txt 依赖列表 argparse...

PT-2026-82549

An unauthenticated client that can reach a MongoDB Connector for BI deployment configured with Kerberos authentication may cause mongosqld to terminate when a crafted authentication exchange encounters a specific GSSAPI error-handling condition. This can interrupt BI Connector availability until...

CVE-2019-9053

Risolto grazie a https://tryhackme.com/room/easyctf : buon divertimento Problemi critici risolti 1. Compatibilità da Python 2 a Python 3 Prima: print "string" Nuovo: print"string" Modificati tutti gli statement print in funzioni print Aggiornata la formattazione delle stringhe per usare le f-stri...

CVE-2026-80538

A flaw was found in the XFS filesystem within the Linux kernel. The xfsrtginodeensure function incorrectly handles errors returned by xfsrtginodeload, treating I/O, allocation, or corruption errors as successful operations. This oversight can result in the realtime group inode remaining unset,...

CVE-2026-80565

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80565 crypto: qce - fix error path in devm_qce_register_algs

In the Linux kernel, the following vulnerability has been resolved: crypto: qce - fix error path in devmqceregisteralgs If ops-registeralgs fails, the error path repeatedly calls the same ops-unregisteralgs from the failed registration. Use the loop index to unregister the previously registered...

CVE-2026-80559

CVE-2026-80559 is a Linux kernel vulnerability in the sur40 input driver. The root cause is an incorrect registration ordering in sur40_probe(): input_register_device() was called before the V4L2 video device and vb2_queue were fully initialized. If userspace opened the input device immediately, ...