CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101079

The agentverus agentverus-scanner (up to version 0.8.1 ) contains a vulnerability in the isSecurityDefenseSkill function located in dist/scanner/analyzers/context.js . The root cause is the reliance on untrusted inputs during a security decision. Exploitation requires a local position to initiate...

EUVD-2026-88336

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-101079 agentverus agentverus-scanner context.js isSecurityDefenseSkill reliance on untrusted inputs in a security decision

A vulnerability was found in agentverus agentverus-scanner up to 0.8.1. Affected by this vulnerability is the function isSecurityDefenseSkill of the file dist/scanner/analyzers/context.js. Performing a manipulation results in reliance on untrusted inputs in a security decision. The attack must be...

CVE-2026-93286

A flaw was found in the Linux kernel's AppleTalk subsystem. When transmitting network packets over a network device that lacks an AppleTalk interface configuration, the system fails to verify that interface data is initialized before accessing it. A local user can exploit this flaw by sending...

CVE-2026-101078

A vulnerability exists in deepseek-ai deepseek-harness versions up to 0.1.7-rc.2 within the Landlock Backend component. The issue stems from an unknown function in the file packages/sandbox/sandbox-local/src/profiles.ts, which can lead to improper isolation or compartmentalization . Exploitation ...

EUVD-2026-88334

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078 deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-101078 deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation

A vulnerability has been found in deepseek-ai deepseek-harness up to 0.1.7-rc.2. Affected is an unknown function of the file packages/sandbox/sandbox-local/src/profiles.ts of the component Landlock Backend. Such manipulation leads to improper isolation or compartmentalization. The attack must be...

CVE-2026-93820

A flaw was found in the Linux kernel's Rockchip PCIe host controller driver. Stopping and removing a PCIe root bus without proper synchronization creates a race condition with concurrent device rescanning or hotplug operations. A local attacker could exploit this flaw to cause a use-after-free...

CVE-2026-93287

A flaw was found in the Linux kernel's I2C System Management Bus SMBus subsystem. A local user can trigger an out-of-bounds memory read by submitting a transfer request with an oversized or invalid block length. This occurs because the kernel does not properly validate user-supplied transfer...

CVE-2022-37704

建议描述 Amanda 3.5.1 存在一个漏洞，允许从普通用户 backup 提权至 root。位于 /lib/amanda/rundump 的 SUID 二进制文件会以 root 权限执行 /usr/sbin/dump，攻击者可通过受控参数执行该操作，从而导致权限提升、拒绝服务和信息泄露。 附加信息 Amanda 是一款知名软件，该软件包存在于所有已知的 Linux 发行版甚至 Windows 上。我认为这个漏洞对该特定软件来说是严重的，我可以说这是一个信任漏洞（rundump 二进制文件信任 /usr/sbin/dump），但不幸的是，dump 可以被篡改以获得 root...

CVE-2026-98133

A flaw was found in the Linux kernel's NTFS file system implementation. When an error occurs while setting an extended attribute EA, the kernel prematurely clears the flag indicating that extended attributes are present. A local user can exploit this vulnerability by triggering a failed extended...

CVE-2026-98131

A flaw was found in the Linux kernel's stmmac network driver. During network packet transmission, a failure in Direct Memory Access DMA mapping for packet fragments causes the driver to drop the packet without releasing previously allocated mappings. A local user could exploit this flaw by...

CVE-2018-19788

CVE-2018-19788 CVE-2018-19788 的超级简单利用 要使用此工具，您必须在 Policy Kit 中创建一个 UID INTMAX 的用户，或者已经拥有一个具有该 UID 的低权限用户。 UID 可以在创建用户时指定，如下所示，然后在执行脚本前使用： $ useradd -u 4000000001 PrivEsc $ passwd PrivEsc $ su PrivEsc $ chmod +x /tmp/CVE-2018-19788PrivEsc.sh $ ./tmp/CVE-2018-19788PrivEsc.sh...

CVE-2026-98129

A flaw was found in the Linux kernel's mpi3mr SCSI driver. The driver fails to validate the return value of a memory allocation when adding a Serial Attached SCSI SAS port, leading to a NULL pointer dereference if the allocation fails. A local user could exploit this flaw under low-memory...

CVE-2026-98128

A flaw was found in the Linux kernel's mpi3mr driver. This vulnerability can lead to a Denial of Service DoS due to kernel memory exhaustion. When an error occurs during Serial Attached SCSI SAS port addition, the driver fails to properly release an acquired reference count on the target device...

CVE-2026-93816

A flaw was found in the Linux kernel's Flash-Friendly File System F2FS. When converting inline directory entries into standard directory blocks, the kernel does not properly validate recorded filename lengths before copying them. A local user could exploit this flaw by mounting a specially crafte...

CVE-2026-93284

A flaw was found in the Linux kernel's DRM Direct Rendering Manager pagemap subsystem. During page migration error handling, the kernel clears the page tracking array before finishing Direct Memory Access DMA unmapping operations. A local user could exploit this flaw by triggering migration...

CVE-2026-93817

A flaw was found in the Linux kernel's performance events perf subsystem. This vulnerability occurs because memory allocated for event address filters is released prematurely while still in active use by other kernel processes. A local user could exploit this use-after-free flaw during performanc...