BIT-GITEA-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-80669 bpf: Disable xfrm_decode_session hook attachment

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

CVE-2026-80669

In the Linux kernel, the following vulnerability has been resolved: bpf: Disable xfrmdecodesession hook attachment BPF LSM programs can currently attach to xfrmdecodesession. That hook may return an error, but securityskbclassifyflow calls it from a void path and triggers BUGON if an error is...

openSUSE 16 Security Update : dracut (openSUSE-SU-2026:21639-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21639-1 advisory. This update for dracut fixes the following issue: Update to version 059+suse.726.gde083b3a1. Securitys issue fixed: - CVE-2026-15816: root code executio...

Malicious code in flyteplugins-agento11y (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46ad72ab2f7b1b228296686a3090c2c81be3a2257b47fa801b300c1f7b66c09a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

SUSE CVE-2026-74342

In the Linux kernel, the following vulnerability has been resolved: kernfs: link kn to its parent before the LSM init hook After commit 12e9e3cd03b5 "simpexattr: use per-sb cache", kernfsxattrset and kernfsxattrget compute the cache via kernfsrootkn before any other check. kernfsrootkn walks...

MAL-2026-14555 Malicious code in ekx-report-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a980e97d1539649ea4a9921cfeb308833c80e0832c1515f3f8e3a71d0b085b78 On import, the package runs a setup routine that reads a session credential from /tmp/.sandboxtoken and issues an authenticated GET to...

Malicious code in mathkitlite (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c91a8962fd66464487bcdb5e2c217990cfdea55df22e7166c11703f91dfb7845 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

TencentOS Server 3: dracut (TSSA-2026:0902)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0902 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

Security update for dracut (important)

openSUSE security update: security update for dracut ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21639-1 Rating: important References: bsc1274432 Cross-References: CVE-2026-15816 CVSS scores: CVE-2026-15816 SUSE : 7.5...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-60004

CVE-2026-60004 is a critical RCE in Gitea (and Forgejo ) versions 1.17–1.27.0 (CVSS 9.8). The flaw is in the POST /api/v1/repos/{owner}/{repo}/diffpatch endpoint, where patches are applied in a bare temporary clone whose root is $GIT_DIR. Submitting the same malicious patch twice triggers an add/...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

CVE-2026-60004

Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation...

Malicious code in commonjs-code-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab469a55ec3f0650bc2185b91e884304cf1e370b1e17992a328479ce4883ad On npm install, the package's postinstall hook runs index.js, which fetches JSON from https://access-token-delta.vercel.app and passes the returned...

MAL-2026-14534 Malicious code in commonjs-code-token (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6ab469a55ec3f0650bc2185b91e884304cf1e370b1e17992a328479ce4883ad On npm install, the package's postinstall hook runs index.js, which fetches JSON from https://access-token-delta.vercel.app and passes the returned...

Malicious code in analytics-v2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a589041eddd586d6269526f6c6e67f6b645994a24a143af07e35d8e2f9ce0982 On npm install, the package's preinstall hook executes index.js which harvests host and user identity data os.hostname, os.platform, os.arch,...