Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an unvalidated length of the ND option. This vulnerability may lead to out-of-bounds access by the pars...

PT-2026-39629

Name of the Vulnerable Software and Affected Versions pgAdmin 4 versions prior to 9.15 Description A symbolic-link path traversal issue exists in the pgAdmin 4 File Manager. The check access permission function utilized os.path.abspath, which resolves parent directory references but fails to...

PT-2026-36500

Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions 2.25.8.0 through 2.26.15.72 WhatsApp for Android versions 2.25.8.0 through 2.26.7.10 Description Incomplete validation of AI rich response messages for Instagram Reels allows a user to trigger the processing of media...

PT-2026-36530

Name of the Vulnerable Software and Affected Versions dtrace affected versions not specified Description An unprivileged attacker can create a user-space process with a malicious ELF binary containing an out-of-range sh link field. When a root-level dtrace process attaches to or instruments that...

CVE-2026-7501

creationtimestamp| type| source ---|---|--- 2026-04-30 23:21:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqqxhilz62p...

CVE-2025-36180

creationtimestamp| type| source ---|---|--- 2026-04-30 22:59:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqppni7yv2v...

CVE-2025-36122

creationtimestamp| type| source ---|---|--- 2026-04-30 22:52:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqpd6gdh62o...

CVE-2026-4502

creationtimestamp| type| source ---|---|--- 2026-04-30 22:35:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqofdveiw2q...

CVE-2026-33452

creationtimestamp| type| source ---|---|--- 2026-04-30 22:01:13+00:00| seen| https://bsky.app/profile/euvd-bot.bsky.social/post/3mkqmh6eclc2s 2026-04-30 22:09:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkqmw3qe7o32 2026-05-03...

CVE-2026-38992

creationtimestamp| type| source ---|---|--- 2026-04-30 22:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmfx2x2a2e 2026-08-04 11:00:26+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/d294098f-712b-4975-ba6e-c809284d499f...

CVE-2026-36841

creationtimestamp| type| source ---|---|--- 2026-04-30 22:00:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmfplzr52k...

CVE-2026-41952

creationtimestamp| type| source ---|---|--- 2026-04-30 21:58:10+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkqmboplah2z...

CVE-2026-32148

creationtimestamp| type| source ---|---|--- 2026-04-30 21:38:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkql6iymc32i...

CVE-2026-3832

creationtimestamp| type| source ---|---|--- 2026-04-30 21:33:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqkvk5kcy2t...

DEBIAN-CVE-2026-28532

FRRouting before 10.5.3 contains an integer overflow vulnerability in seven OSPF Traffic Engineering and Segment Routing TLV parser functions where a uint16t accumulator variable truncates uint32t values returned by the TLVSIZE macro, causing the loop termination condition to fail while pointer...

CVE-2026-7502 LinkStackOrg LinkStack Management Endpoint UserController.php saveLink authorization

A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6. The affected element is the function saveLink of the file app/Http/Controllers/UserController.php of the component Management Endpoint. The manipulation leads to authorization bypass. The attack can be initiated...

CVE-2026-3833

creationtimestamp| type| source ---|---|--- 2026-04-30 20:59:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqixvs4pq2q 2026-05-22 13:23:10+00:00| seen| https://t.me/bdufstecru/3189...

EUVD-2026-26434

IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...

CVE-2026-36764

creationtimestamp| type| source ---|---|--- 2026-04-30 20:49:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mkqigkdoqy2h...

CVE-2026-28532

FRRouting before 10.5.3 is affected by an integer overflow in seven OSPF Traffic Engineering and Segment Routing TLV parser functions. A uint16_t accumulator truncates uint32_t values returned by TLV_SIZE(), causing the loop termination condition to fail while pointer advancement continues. An at...