ROS-20260922-73-0050

The vulnerability of the vti6siocdevprivate function in the net/ipv6/ip6vti.c module of the Linux operating system’s IPv6 kernel implementation is related to insufficient spatial partitioning. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

syncord

Syncord root@kitploit: $$\ $$ | $$$$$$$\ $$\ $$\ $$$$$$$\ $$$$$$$\ $$$$$$\ $$$$$$\ $$$$$$$ | $$ |$$ | $$ |$$ $$\ $$ |$$ $$\ $$ $$\ $$ $$ | $$$$$$\ $$ | $$ |$$ | $$ |$$ / $$ / $$ |$$ | |$$ / $$ | $$\ $$ | $$ |$$ | $$ |$$ | $$ | $$ |$$ | $$ | $$ | $$$$$$$ |$$$$$$$ |$$ | $$ |$$$$$$$\ $$$$$$ |$$...

platform_external_gptfdisk_AOSP10_r33_CVE-2021-0308

GPT fdisk aka gdisk, cgdisk, and sgdisk and FixParts by Roderick W. Smith, [email protected] Introduction This package includes the source code for four related disk partitioning programs: gdisk -- This program is modeled after Linux fdisk, but it operates on GUID Partition Table GPT disks...

unstructured: Server-Side Request Forgery in the URL-based partitioning

SummaryServer-Side Request Forgery in unstructured. The url= argument of partition, partitionhtml, and partitionmd is fetched via requests.get with no host validation. The response body is returned as Element text, so this is a full-read SSRF — attackers reach loopback admin APIs, internal HTTP...

PYSEC-2026-3930 unstructured: Server-Side Request Forgery in the URL-based partitioning

Summary Server-Side Request Forgery in unstructured. The url= argument of partition, partitionhtml, and partitionmd is fetched via requests.get with no host validation. The response body is returned as Element text, so this is a full-read SSRF — attackers reach loopback admin APIs, internal HTTP...

unstructured: Server-Side Request Forgery in the URL-based partitioning

Summary Server-Side Request Forgery in unstructured. The url= argument of partition, partitionhtml, and partitionmd is fetched via requests.get with no host validation. The response body is returned as Element text, so this is a full-read SSRF — attackers reach loopback admin APIs, internal HTTP...

The vulnerability of the nameAndService() function in the pkg/provider/kubernetes/crd/kubernetes_http.go file, a provider for integrating with the Kubernetes CRD of the reverse proxy server Containous Traefik, allows an attacker to gain unauthorized access to protected information.

The vulnerability of the nameAndService function in the pkg/provider/kubernetes/crd/kuberneteshttp.go file, which is part of the integration provider for Kubernetes’ CRD reverse proxy server Containous Traefik, is related to insufficient spatial partitioning. Exploiting this vulnerability could...

OESA-2026-3232 unbound security update

Unbound is a validating, recursive, caching DNS resolver. It is designed to be fast and lean and incorporates modern features based on open standards. To help increase online privacy, Unbound supports DNS-over-TLS which allows clients to encrypt their communication. Unbound is available for most...

Authentication Bypass by Primary Weakness

Overview org.webjars.npm:electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Affected versions of this package are vulnerable to Authentication Bypass by Primary Weakness in the ProtocolResponse.url when a custom protocol handler omits...

ALPINE-CVE-2026-50252

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

CVE-2026-50252 Possible cache poisoning attack by mapping source port population per thread

In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the entropy of DNS transactions. When resolver load balancing policies depend on the source port while their outcome is revealed this secrecy is undermined...

SALTO ProAccess Space

ADVISORY SUMMARY Successful exploitation of this vulnerability allows an authenticated attacker to escalate privileges and access spaces outside their assigned partition, within the same Salto ProAccess Space installation or system. Exploitation requires valid authenticated operator credentials...

Python package "zhmcclient" stores passwords in clear text in its HMC and API logs

ImpactThe Python package "zhmcclient" writes password-like properties in clear text into its HMC and API logs in the following cases: The 'boot-ftp-password' and 'ssc-master-pw' properties when creating or updating a partition in DPM mode, in the zhmcclient API and HMC logs The 'ssc-master-pw' an...

BIT-MONGODB-2026-9749 Using MaxKey() may crash the server

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

Linux Distros Unpatched Vulnerability : CVE-2026-9749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

EUVD-2026-35865

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

UBUNTU-CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...

CVE-2026-9749

This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer that is, many results are routed to the same consumer,...