CVE-2026-64568 wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsolbcastproberesp double free on alloc failure ieee80211setunsolbcastproberesp calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...

CVE-2026-64568

CVE-2026-64568 is a Linux kernel vulnerability in the wireless stack (wifi/mac80211). The issue is a double free of the rcu_head object when updating the unsol_bcast_probe_resp template: ieee80211_set_unsol_bcast_probe_resp() frees the old object via kfree_rcu() before a new kzalloc() has complet...

CVE-2026-64568

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsolbcastproberesp double free on alloc failure ieee80211setunsolbcastproberesp calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...

MAL-2026-12039 Malicious code in data-format-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21db9b8662eac789b1523c3f2114daa6a5fd3a2a0c7bbfb58fafdf3b4809c7cd The package advertises itself as a data-formatting utility but ships a postinstall.js that auto-executes on npm install and runs shell commands to...

MAL-2026-12028 Malicious code in sextant-cli-darwin-amd64 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9d2e5ab6503eb2b9c12bf64e34cb2fe12227c07b179231ebe23f13b8866181f1 The tarball contains a single 13.4 MB Mach-O darwin/amd64 Go binary at bin/sxt and a package.json with no source, no main, no bin mapping, and no...

Exploit for CVE-2026-17543

PHP CVE-2026-17543 Exposure Validator Safe network-side valid...

Web Device APIs Probe

Probe WebUSB, WebSerial and WebBluetooth availability and optionally request devices from kittysploit import import json class ModuleBrowserAuxiliary: info = "name": "Web Device APIs Probe", "description": "Probe WebUSB, WebSerial and WebBluetooth availability and optionally request devices",...

SUSE CVE-2026-34940

KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript function in internal/modelcontroller/engineollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components ref, modelParam. This shell command is executed via bash ...

CVE-2026-64470

A flaw was found in the Linux kernel's Bluetooth USB btusb driver. This vulnerability occurs during the Marvell Out-Of-Band OOB wakeup configuration when a probe failure happens. An attacker could potentially exploit a use-after-free condition in the completion callback, which may lead to system...

CVE-2026-64422

A flaw was found in the Linux kernel's IPv4 networking stack. Invalid values for net.ipv4.tcpreordering, particularly negative inputs, can lead to an integer overflow when processed. When tcpmtuprobing is enabled, this overflow can cause an out-of-bounds read within the tcpmtuprobe function. This...

Linux device driver framework Pegasus Probe

The vulnerability of the pegasusprobe function in the drivers/input/tablet/pegasusnotetaker.c module of the Linux device driver framework is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability allows a remote attacker to compromise the...

Linux kernel sound subsystem Heap Buffer Overflow

The vulnerability of the nvhdmimcpprobe function in the sound/hda/codecs/hdmi/nvhdmi-mcp.c module of the Linux kernel’s sound subsystem is related to incorrect resource initialization. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Malicious Package

Overview simple-probe-utils is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

globalping-probe v0.50.0

Globalping Probe The Globalping platform relies on a globally distributed network of community-hosted probes, allowing anyone to run network testing commands like ping or traceroute from any location. Join the Globalping probe community Globalping thrives on the contribution of its community – wi...

MAL-2026-11147 Malicious code in simple-probe-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0457a026ab28fbb641d11e4e9ac9d60d026fd77210972f72e6ac931b4b06c59c On npm install, postinstall.js executes shell commands that query cloud instance metadata services AWS IMDS at 169.254.169.254, plus Tencent, Aliyun,...

Malicious code in text-line-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c7e51069873e7107964bf35c4ad5deace11fd5269366791475b18d0426902749 The package advertises itself as a text/line parsing utility, but its shipped index.js contains only unrelated color-conversion stubs...

CVE-2026-64242

A flaw was found in the Linux kernel's USB gadget net2280 driver. This vulnerability occurs due to a double free error in the probe error path. When a gadget device is being initialized, an error can cause the device to be freed twice, leading to memory corruption. This can result in a denial of...

Qualys Cloud Platform Login Panel - Detect

Qualys Cloud Platform login panel was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Qualys Cloud Platform login panel was detected.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Qualys Cloud Platform Login...

Gradio - Server Side Request Forgery Detection

An SSRF Server-Side Request Forgery vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter in a GET request, an attacker can discern the status of internal ports based on the...

IBM webMethods Integration Login Panel - Detect

Identified an exposed IBM or Software AG webMethods login panel !/usr/bin/env python3 -- coding: utf-8 -- """Identified an exposed IBM or Software AG webMethods login panel.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...