CVE-2026-99080

A flaw was found in the Linux kernel's file system component. When freeing file index records inodes, the kernel could fail to release unused internal data tracking nodes xarray nodes left behind during memory management operations. A local user could exploit this flaw to cause a persistent kerne...

CVE-2026-99070

A flaw was found in the Linux kernel's IPv6 subsystem. When nexthop compatibility mode is enabled, a race condition between sizing and populating route notification buffers can trigger an unexpected kernel warning. A local user could trigger this condition during concurrent route modifications,...

CVE-2026-99068

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA ctxfi driver. When clearing Digital Audio Output DAO input mapping entries, the driver fails to properly free allocated memory. A local user could exploit this vulnerability by repeatedly triggering the operation, causi...

CVE-2026-98885

A flaw was found in the Linux kernel's Integrity Measurement Architecture IMA. When opening files on a read-only ext4 filesystem during boot, IMA attempts to update extended file attributes without properly verifying whether changes are permitted. This triggers a journal transaction failure and a...

CVE-2026-25924

CVE-2026-25924 PoC - Kanboard Admin RCE Proof-of-Concept for Administrative RCE via Security Control Bypass Disclosure: Originally reported by me via GHSA-grch-p7vf-vc4f ⚠️ Authorized pentesting/research use only. Vulnerability Information Field| Value ---|--- CVE ID| CVE-2026-25924 Severity| 🔴...

CVE-2026-99079

A flaw was found in the Linux kernel's Mellanox network driver mlx5e. When network traffic redirected to an AFXDP eXpress Data Path socket encounters a full receive ring and buffer refills only partially succeed, the driver retains a stale buffer reference. A remote attacker could exploit this...

CVE-2026-99074

A flaw was found in the Linux kernel's IPv4 networking subsystem. A race condition can occur when updating Path Maximum Transmission Unit PMTU routes while next-hop routing groups are simultaneously reduced in size. A local user with network administration privileges, or an unprivileged user wher...

CVE-2026-98893

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI sensor driver. The driver fails to verify that the received notification payload size is large enough to contain all expected sensor readings before parsing them. A malicious or compromised firmware platform c...

CVE-2026-98892

A flaw was found in the Linux kernel's ARM System Control and Management Interface SCMI firmware driver. The notification handler fails to properly validate the size of incoming base error event payloads before copying the report array. A compromised or malfunctioning firmware interface can provi...

CVE-2026-98891

A flaw was found in the Linux kernel's mac80211 wireless networking subsystem. An adjacent attacker within wireless network range can trigger a Denial of Service DoS by sending a malformed or truncated deauthentication frame. The subsystem accesses the frame's reason code before verifying that th...

Joomla_CVE-2015-8562

JoomlaCVE-2015-8562 A proof of concept for Joomla's CVE-2015-8562 vulnerability Object Injection RCE Intro/Changelog This PoC is the second version of the implementation hosted at exploit-db. -Fixed regenerate session -Added the option to switch from X-Forwarded-For to User-Agent method -Added th...

CVE-2026-98890

A flaw was found in the Linux kernel's Libertas wireless driver. When operating in monitor mode, the driver fails to properly validate the length of transmission frames before accessing header data. A local attacker could exploit this flaw by transmitting truncated monitor frames, triggering an...

CVE-2026-98888

A flaw was found in the Linux kernel's arm64 kprobes subsystem. When tracing or performance monitoring tools trigger a secondary probe while an initial probe is executing its single-step instruction, the kernel treats the event as unrecoverable and corrupts interrupt state tracking. A local user...

CVE-2026-98887

A flaw was found in the Linux kernel's mac80211hwsim wireless driver. By submitting a specially crafted, undersized Netlink message, a local user can trigger an out-of-bounds memory read due to improper message length validation. This flaw primarily allows an attacker to cause a kernel crash...

CVE-2026-98886

A flaw was found in the Linux kernel's gma500 graphics driver. This vulnerability can lead to a Denial of Service DoS when communicating over the display interface. Specifically, the driver ignores timeout and interruption signals while waiting for an HDMI High-Definition Multimedia Interface I2C...

CVE-2026-98883

A flaw was found in the Linux kernel's 8250 serial port driver. On systems utilizing MIPS Alchemy hardware, the driver fails to recognize a specific communication port type during device probing. This failure triggers an internal kernel warning during system startup, which can result in a Denial ...

CVE-2026-98882

A flaw was found in the Linux kernel's Chips Wave5 video processing driver. Missing bounds validation in the video decoder output handling allows the driver to write data outside allocated memory buffers. A local user could exploit this vulnerability to cause a Denial of Service DoS through a...

CVE-2026-98881

A flaw was found in the Linux kernel's bridge networking subsystem. An obsolete synchronization call during the deletion of bridge multicast devices causes severe lock contention within the networking layer. A local user could exploit this flaw by repeatedly creating and removing network bridge...

CVE-2026-98880

A flaw was found in the Linux kernel's ntfs3 file system driver. The driver fails to properly handle errors when configuring the block size while mounting a file system. A local user could exploit this flaw by mounting a specially crafted NTFS image with an unsupported block size, triggering a...

WSUS-RCE-Mitigation-59287

🚨 CRITICAL CYBERSECURITY ALERT: RCE in WSUS CVE-2025-59287 🚨 CREATOR AND CREDITS: @esteban11121 This guide has been created to help the community quickly mitigate the vulnerability. STATUS: Active Exploitation In-the-Wild Confirmed. This is a Remote Code Execution RCE vulnerability affecting WSUS...