NanaZip 6.5 - DoS

Exploit Title: NanaZip 6.5 - DoS Date: 2026-07-17 Exploit Author: Pig-Tail Jorge González Milla Vendor Homepage: https://github.com/M2Team/NanaZip Software Link: https://github.com/M2Team/NanaZip/releases Version: NanaZip = 6.5 Preview 6.5.1742.0 fixed 6.5.1749.0 Tested on: Windows CVE:...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099776)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099776 advisory. In the Linux kernel, the following vulnerability has been resolved: dm snapshot: fix lockup in dmexceptiontableexit There was reported lockup when we exit a snapshot...

CVE-2026-74879: Generation of Error Message Containing Sensitive Information

opensslencrypt versions before 1.4.0 contain an information disclosure vulnerability in the /ready endpoint that returns full database exception strings to unauthenticated callers. Attackers can trigger database errors to extract sensitive information including hostnames, IP addresses, connection...

PT-2026-73269

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-73279

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

MINI-44P3-8QVP-RGFQ

Bulletin has no description...

CVE-2026-74794 Scriban before 6.6.0 Denial of Service via Infinite Recursion

Scriban before 6.6.0 contains an infinite recursion vulnerability in object rendering when the ObjectRecursionLimit property defaults to unlimited. Attackers can supply circular reference objects to the template context, exhausting stack space and triggering an uncatchable StackOverflowException...

MINI-64FH-C6CW-R53W

Bulletin has no description...

MINI-73XC-4GFX-WQJ6

Bulletin has no description...

CVE-2026-74767 Unbounded DAA Decompression in Pandora Allows Denial of Service via Decompression Bomb

Pandora contains a denial-of-service vulnerability in its handling of DAA Direct Access Archive files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress without enforcing a limit on the resulting uncompressed data. An attacker abl...

MINI-R9W4-76CQ-4VGF

Bulletin has no description...

MINI-F2RH-RPHP-35JH

Bulletin has no description...

CVE-2026-72325

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

UBUNTU-CVE-2026-72325

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Branch Sampling BRS and Last Branch Record LBR are mutually exclusive hardware features, and users of both are tracked via cpuc-lbrusers. When SVM is toggled on a CPU...

EUVD-2026-59293

In the Linux kernel, the following vulnerability has been resolved: hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeedtachvaltorpm function calculates the fan RPM using the tachometer value. However, it does no...

CVE-2026-72325

Technical details of CVE-2026-72325 are not public in the provided documents. Available descriptions summarize the issue but do not expose affected products, versions, or fixes. Monitor for updates from vendors/security advisories.

MINI-2HVJ-VX7F-Q8CQ

Bulletin has no description...

.NET: .NET Elevation of Privilege Vulnerability

Uncaught exception in .NET allows an authorized attacker to elevate privileges locally...

PT-2026-72513

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where Branch Sampling BRS and Last Branch Record LBR are treated as mutually exclusive hardware features, both tracked via the cpuc-lbr users variable...