CVE-2019-25688 Kados R10 GreenBee SQL Injection via menu_lev1 Parameter

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menulev1 parameter. Attackers can send crafted requests with malicious SQL payloads in the menulev1 parameter to extract sensitive...

PT-2026-30496

Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu lev1 parameter. Attackers can send crafted requests with malicious SQL payloads in the menu lev1 parameter to extract sensitive...

CVE-2026-20114

A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because...

CVE-2026-20114

A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and access management APIs that would not normally be available for Lobby Ambassador users. This vulnerability exists because...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001412)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001412 advisory. IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004380 advisory. A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstance...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-004440)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004440 advisory. IBM Power9 AIX 7.1, 7.2, and VIOS 3.1 processors could allow a local user to obtain sensitive information from the data in the L1 cache under extenuating...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001385)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001385 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001462)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001462 advisory. A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstance...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001310)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001310 advisory. Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000835)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000835 advisory. arch/x86/kvm/mmu.c in the Linux kernel through 4.13.5, when nested virtualisation is used, does not properly traverse guest pagetable entries to resolve a guest...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004156 advisory. A flaw was discovered in the way that the KVM hypervisor handled instruction emulation for an L2 guest when nested virtualisation is enabled. Under some circumstance...

Exploit for CVE-2003-0201

Kioptrix Level 1: Full-Spectrum Vulnerability Audit & Exploita...

OESA-2025-2766 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.CVE-2024-36357 In the Lin...

kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

kernel: transient execution vulnerability in some AMD processors

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries...

KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O

...

CVE-2025-40026

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

EUVD-2025-36441

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Don't recheck L1 intercepts when completing userspace I/O When completing emulation of instruction that generated a userspace exit for I/O, don't recheck L1 intercepts as KVM has already finished that phase of instructi...

CVE-2025-40026

CVE-2025-40026 — Linux kernel KVM x86 issue : When completing emulation of an instruction that generated a userspace exit for I/O, the kernel could re-check L1 intercepts even after emulation had completed and the host had effectively allowed L2 to perform the I/O. If the I/O permission bitmaps w...