14044 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ALSA: usb-audio: fixed a stack information leak in RME Digiface status sndrmedigifacereadstatus reads a four-word status block from the device into an uninitialized on-stack le32 buffer buf4. Whenever the vendor control-IN...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: netdev-genl: The report NAPI thread PID in the caller’s pid namespace function now correctly reports the NAPI kthread PID in the NETDEVANAPIPID using taskpidnr, which returns the PID from the caller’s pid namespace. The...
CVE-2026-76172
creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b 2026-09-02 19:33:12+00:00| seen| https://gist.github.com/alon710/af575107e879f298d568b88dd8bac4cb...
CVE-2026-74712
A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...
CVE-2026-66897
creationtimestamp| type| source ---|---|--- 2026-08-24 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f 2026-08-24 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150018844317018 2026-08-24 10:30:29+00:00| seen|...
CVE-2026-68959
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:31+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjzt2arz2z 2026-09-24 22:24:10+00:00| seen|...
CVE-2026-78255
creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...
CVE-2026-78202
creationtimestamp| type| source ---|---|--- 2026-08-24 08:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kdunt7esf746 2026-08-24 10:01:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtt2dlmjhv2i...
CVE-2026-78201
creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...
CVE-2025-44810
creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-74884
creationtimestamp| type| source ---|---|--- 2026-08-24 07:31:31+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtsrwtbp6o2j...
Malicious Package
Overview twork-data-services-aggregator-sme-task-info is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
CVE-2026-78211
creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...
Security update for Multi-Linux Manager Client Tools - Monitoring stack
This update fixes the following issues: golang-github-prometheus-alertmanager: CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266615 golang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4: Security fixes:...
PT-2026-80806
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
PT-2026-80796
Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...
PT-2026-80994
Name of the Vulnerable Software and Affected Versions D-Link DI-8100G version 17.12.20A1 Description An issue exists in the msp info endpoint where the flag parameter can be exploited to execute arbitrary code. Arbitrary code execution allows an attacker to run unauthorized commands on the system...
PT-2026-80874
CVE-2025-44810 Patch https://t.co/3FEZogXoCn Don't wait vulnerability scanning results: https://t.co/oh1APvMMnd...