CVE-2026-6658

A vulnerability in jupyter/nbconvert versions tag. This vulnerability impacts any server using nbconvert to render notebooks as HTML, allowing attackers to execute arbitrary JavaScript in the context of users viewing the HTML export...

CVE-2026-53193

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA timer component. This vulnerability occurs when a timer object is freed while timer instances are still associated with it, particularly when userspace-driven timers are involved. A local user can exploit this by...

Binary-Exploitation-and-Reverse-Engineering

Binary Exploitation & Reverse Engineering Lab Hands-on memory...

Linux Kernel DoS

The vulnerability of the runwork function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

pentest-cheatsheet

pentest-cheatsheet Commands, techniques and notes for penetrat...

CVE-2026-53071

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...

pentest-agent-vs-llm-benchmark-effectiveness

Backbone or Backbone-Architecture? A controlled study of LLM age...

CVE-2026-54842

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25...

termux-tx

TX — Termux eXecutive 🚀 Advanced Cybersecurity CLI Tool f...

ROS-20260625-73-0014

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20260625-73-0006

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260625-73-0005

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260625-73-0010

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

libcurl Certificate Validation

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to remotely replace data or gain unauthorized access to protected information...

IBM Jazz Foundation XXE

The vulnerability of the integrated environment for managing the development lifecycle of IBM Jazz Foundation relates to incorrect restrictions on XML references to external objects. Exploiting this vulnerability allows a malicious actor to perform XXE attacks remotely...

OpenBao encryption Privilege Escalation

The vulnerability of the OpenBao encryption and secret management system is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

CVE-2026-7569 Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must vis...

CVE-2026-7569

CVE-2026-7569 affects Quest NetVault Backup viewclient. The flaw is a Cross‑Site Scripting vulnerability in the viewclient webpage due to inadequate input validation, which can be combined with other issues to execute arbitrary code in the context of SYSTEM. Successful exploitation requires user ...

MAL-2026-6435 Malicious code in serverless-leo (npm)

The serverless-leo npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

Astra Linux – Vulnerability in libsoup3

A flaw was discovered in the asynchronous message queue handling of the libsoup library, which is widely used by GNOME and WebKit-based applications for managing HTTP/2 communications. When network operations are aborted at specific timing intervals, an internal message queue item may be freed...