CVE-2026-63987

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks the ETHTOOLAPROFILEIRQMODERATION nest list with an index 'i' and writes newprofilei++ without bounding i. The destination is kmemdup'd at...

CVE-2026-63987 ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES ethnlupdateprofile walks the ETHTOOLAPROFILEIRQMODERATION nest list with an index 'i' and writes newprofilei++ without bounding i. The destination is kmemdup'd at...

CVE-2026-63827

In the Linux kernel, the following vulnerability has been resolved: apparmor: fix use-after-free in rawdata dedup loop aareplaceprofiles walks ns-rawdatalist to dedup the incoming policy blob against entries already attached to existing profiles. Per the kernel-doc on struct aaloaddata, list...

CVE-2026-12228

creationtimestamp| type| source ---|---|--- 2026-07-18 22:21:15+00:00| seen| https://infosec.exchange/users/tomcat/statuses/116943308400000440 2026-07-18 23:30:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqxgbznwv727 2026-07-19 00:00:34+00:00| seen|...

Root-My-Galaxy-Payloads

Root My Galaxy Payloads This repository contains the device-s...

CVE-2026-9046

creationtimestamp| type| source ---|---|--- 2026-07-17 05:13:21+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqsyirmdtq2e 2026-07-17 05:13:36+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116933605175540875...

CVE-2026-62232

creationtimestamp| type| source ---|---|--- 2026-07-17 02:46:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqsqbhg4qj2v 2026-07-17 03:00:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116933081864341410 2026-07-17 03:00:34+00:00| seen|...

CVE-2026-57075

creationtimestamp| type| source ---|---|--- 2026-07-17 00:00:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqsgyvipqu2e 2026-07-17 01:19:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqslfpmuvd2e 2026-07-17 14:10:05+00:00| seen|...

CVE-2026-46515

creationtimestamp| type| source ---|---|--- 2026-07-16 19:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqryzl4r7q2c 2026-07-16 20:01:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrzocxj7w2m...

CVE-2026-26718

creationtimestamp| type| source ---|---|--- 2026-07-16 18:50:03+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqrvoapjwx2w 2026-07-16 19:00:06+00:00| seen| Telegram/rNnuPZSkZWDVpEPnyDrVrJ0tqHAdHjPuF4Jq-SaqH-76iI 2026-07-17 00:00:10+00:00| published-proof-of-concept|...

CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

CVE-2026-44968 dbt-mcp: Argument Injection in dbt CLI Tool Wrappers via node_selection and resource_type Parameters

dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, rundbtcommand in src/dbtmcp/dbtcli/tools.py appended unsanitized nodeselection and resourcetype values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-di...

CVE-2026-44632

creationtimestamp| type| source ---|---|--- 2026-07-16 16:44:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqron2dykv25 2026-07-16 18:42:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqrvbfj4ew2e 2026-07-18 05:07:06+00:00| seen|...

CVE-2023-49900

creationtimestamp| type| source ---|---|--- 2026-07-16 10:32:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqqztryhh52d 2026-07-16 10:47:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqr2p73vnu2i...

PT-2026-60681

Name of the Vulnerable Software and Affected Versions github.com/kumahq/kuma/v2 versions 2.8.0 through 2.9.15 Description When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, the tool disables TLS verification. This causes API tokens to be transmitte...

CVE-2026-55652

creationtimestamp| type| source ---|---|--- 2026-07-15 22:06:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpq5txf2q2w 2026-07-15 23:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpt7o5jtk26 2026-07-16 01:04:56+00:00| seen|...

CVE-2026-62378

creationtimestamp| type| source ---|---|--- 2026-07-15 17:44:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqpbjey2z52o 2026-07-15 18:00:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqpcg2jm3y2e 2026-07-15 19:12:44+00:00| seen|...

CVE-2026-48336

creationtimestamp| type| source ---|---|--- 2026-07-15 17:03:54+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mqp7bipiyr2c 2026-07-15 17:04:10+00:00| seen| https://mastodon.social/users/hugovalters/statuses/116925074584278951...

CVE-2026-61736

creationtimestamp| type| source ---|---|--- 2026-07-15 15:48:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqp2zvftsc2w 2026-07-15 16:00:47+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqp3qmrswz2h 2026-07-20 22:35:18+00:00|...