BIT-JAVA-2025-7425 Libxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptr

A flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may acce...

Exploit for CVE-2026-0300

CVE-2026-0300-PANOS Security Rese...

CVE-2026-43271

creationtimestamp| type| source ---|---|--- 2026-05-06 14:09:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6uv3k2sb2t 2026-07-02 06:18:05+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702...

CVE-2026-43269

creationtimestamp| type| source ---|---|--- 2026-05-06 14:02:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6ujeqkqn2e 2026-07-02 06:18:00+00:00| seen| https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities20260702 2026-08-03 06:53:16+00:00| seen...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, airflow...

CVE-2026-6210

creationtimestamp| type| source ---|---|--- 2026-05-06 13:44:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ml6tj2dlhc2r...

CVE-2025-68624

creationtimestamp| type| source ---|---|--- 2026-05-06 13:36:50+00:00| seen| https://gist.github.com/alessandrobertoldi/1ebe0f48aa0119d787ac0ff710057d92 2026-06-21 23:29:09+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3motjmau62s2h 2026-09-04 08:34:06+00:00| seen|...

CVE-2026-43089

A flaw was found in the Linux kernel's xfrmuser module. A one-byte padding hole in the struct xfrmusersaid was not properly initialized before being copied to userspace. This information disclosure vulnerability could allow a local attacker to obtain sensitive information from kernel memory...

CVE-2026-5081

Apache::Session::Generate::ModUniqueId versions from 1.54 through 1.94 for Perl session ids are insecure. Apache::Session::Generate::ModUniqueId added in version 1.54 uses the value of the UNIQUEID environment variable for the session id. The UNIQUEID variable is set by the Apache moduniqueid...

EUVD-2026-27669

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchpipcgetclusteraggrirq The clustercfg array is dynamically allocated to hold per-CPU configuration structures, with its size based on the number of online CPUs. Previously, thi...

EUVD-2026-27771

In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...

EUVD-2026-27738

In the Linux kernel, the following vulnerability has been resolved: procfs: fix possible double mmput in doprocmapquery When user provides incorrectly sized buffer for build ID for PROCMAPQUERY we return with -ENAMETOOLONG error. After recent changes this condition happens later, after we unlocke...

Apache Wicket has a Path Traversal issue

FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter or the clientFileName before constructing file paths, allowing an unauthenticated attacker to write arbitrary files outside the intended upload directory or read files from arbitrary locations on t...

EUVD-2026-27554

Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a session fixation attack in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version...

Apache Wicket has a Session Fixation issue

Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a session fixation attack in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version...

GHSA-QPJW-P3JG-59J6 Apache Wicket has a Session Fixation issue

Missing invocation of Servlet http web request method changeSessionId after session binding can be exploited for a session fixation attack in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version...

CVE-2026-43274

In the Linux kernel, the following vulnerability has been resolved: mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchpipcgetclusteraggrirq The clustercfg array is dynamically allocated to hold per-CPU configuration structures, with its size based on the number of online CPUs. Previously, thi...

CVE-2026-43261

In the Linux kernel, the following vulnerability has been resolved: arm64: Add support for TSV110 Spectre-BHB mitigation The TSV110 processor is vulnerable to the Spectre-BHB Branch History Buffer attack, which can be exploited to leak information through branch prediction side channels. This...

CVE-2026-43252

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable net/mptcp/pmkernel.c:10...

CVE-2026-43208

In the Linux kernel, the following vulnerability has been resolved: net: do not pass flowid to setrpscpu Blamed commit made the assumption that the RPS table for each receive queue would have the same size, and that it would not change. Compute flowid in setrpscpu, do not assume we can use the...