CoreExploit-Final

CoreExploit 🔐 Ethical Penetration Testing Learning Platfor...

RHSA-2026:12273 Red Hat Security Advisory: OpenShift Container Platform 4.12.88 packages and security update

Bulletin has no description...

CVE-2026-42308

Pillow is a Python imaging library. Prior to version 12.2.0, if a font advances for each glyph by an exceeding large amount, when Pillow keeps track of the current position, it may lead to an integer overflow. This issue has been patched in version 12.2.0...

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2

CVE-2026-5107 affecting package frr for versions less than 10.5.0-2. A patched version of the package is available...

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2

CVE-2026-27141 affecting package ignition-flatcar for versions less than 2.22.0-2. A patched version of the package is available...

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15

CVE-2026-32288 affecting package gh for versions less than 2.62.0-15. A patched version of the package is available...

CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-31694 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2026-6861 affecting package emacs for versions less than 29.4-4

CVE-2026-6861 affecting package emacs for versions less than 29.4-4. A patched version of the package is available...

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17

CVE-2026-39882 affecting package moby-engine for versions less than 25.0.3-17. A patched version of the package is available...

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1

CVE-2025-66215 affecting package opensc for versions less than 0.27.1-1. An upgraded version of the package is available that resolves this issue...

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2

CVE-2026-4647 affecting package crash for versions less than 9.0.0-2. A patched version of the package is available...

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2

CVE-2026-43267 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-71290 affecting package kernel for versions less than 6.6.137.1-2. An upgraded version of the package is available that resolves this issue...

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2

CVE-2025-22125 affecting package kernel for versions less than 6.6.137.1-2. A patched version of the package is available...

SUSE CVE-2026-39817

The "go tool pack" subcommand usually used only by the compiler as an internal tool with known-good inputs does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem...

SUSE CVE-2026-43259

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: set platform driver data Add missing platformsetdrvdata as the data will be used in remove...

GHSA-2283-WF8C-RW8R vulnerabilities

Vulnerabilities for packages: dbmate, otel-cli, k8sgpt, flyte, k3s, prometheus-adapter, prometheus, terraform-provider-acme, teleport, cortex, juicefs, thanos, undock, jitsucom-bulker, sftpgo-plugin-geoipfilter, prometheus-operator, secrets-store-csi-driver-provider-gcp, apko, helm, buildkitd,...

CVE-2026-39836 vulnerabilities

Vulnerabilities for packages: dbmate, otel-cli, k8sgpt, manifest-tool, kubeflow, flyte, keda, k3s, http-echo, prometheus-adapter, speedtest-go, prometheus, terraform-provider-acme, cluster-proportional-autoscaler, pgtimetable, teleport, cortex, juicefs, thanos, container-object-storage-interface,...

GHSA-3V3M-WC6V-X4X3 vulnerabilities

Vulnerabilities for packages: argocd-image-updater...

GHSA-QF3Q-3H68-MMH2 vulnerabilities

Vulnerabilities for packages: calico-fips, dask-gateway, amazon-k8s-cni, openbao-fips, kubernetes-dns-node-cache-fips, kots, minify, fluent-operator-fips, policy-controller-fips, victoriametrics-cluster, kubeflow-fips, flux-image-reflector-controller-fips, secrets-store-csi-driver-provider-azure,...