Linux Distros Unpatched Vulnerability : CVE-2026-90190

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nullblk: use DEFINEMUTEX for the file-scope mutex In nullinit, mutexinit&lock currently happens after configfsregistersubsystem, which exposes the nullb subsyst...

Linux Distros Unpatched Vulnerability : CVE-2026-90180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - block: mtip32xx: synchronize ioctls with device removal The ioctl handlers only test REMOVEPENDING before entering mtiphwioctl. Removal can set that bit...

Linux Distros Unpatched Vulnerability : CVE-2026-90057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - slip: remove sliphangup to fix use-after-free in slipreceivebuf Jaeyoung Chung and Eulgyu Kim reported a slab-use-after-free read in slipreceivebuf when racing...

Linux Distros Unpatched Vulnerability : CVE-2026-90131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ntfs: serialize resident iomap reads with mreclock ntfsreadiomapbeginresident walks the MFT record through ntfsattrlookup - ntfsattrfind without taking...

Linux Distros Unpatched Vulnerability : CVE-2026-90189

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nullblk: register configfs subsystem after creating default devices In nullinit, configfsregistersubsystem currently runs before registerblkdev, so when nullblk...

Linux Distros Unpatched Vulnerability : CVE-2026-93123

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: qcom-geni: do not advance stale DMA completions The qcom GENI serial DMA TX completion path advances the transmit fifo by the number of bytes recorded i...

EulerOS Virtualization 2.11.1 : systemd (EulerOS-SA-2026-3477)

According to the versions of the systemd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a...

Linux Distros Unpatched Vulnerability : CVE-2026-90224

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: nci: fix double completion race in ncidataexchangecomplete nciclosedevice and ncirxwork can both call ncidataexchangecomplete concurrently. After commit...

Linux Distros Unpatched Vulnerability : CVE-2026-90206

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet: fix maxqid race between configfs and controller allocation The function nvmetsubsysattrqidmaxstore can race against nvmetallocctrl when a subsystem's...

Linux Distros Unpatched Vulnerability : CVE-2026-90430

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized tegra241vintfinitlvcmdq stores the freshly allocated vcmdq pointer to the vintf-lvcmd...

Linux Distros Unpatched Vulnerability : CVE-2026-90243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iommu/vt-d: Clear Present bit before tearing down copied context entry copiedcontextteardown zeroes the 128-bit context entry with contextclearentry while the...

Linux Distros Unpatched Vulnerability : CVE-2026-90393

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix potential UAF in bpfnetnslinkupdateprog In bpfnetnslinkupdateprog, the checks for oldprog and prog type are currently performed locklessly before...

Linux Kernel Race Condition Vulnerability

Linux Kernel contains a race condition vulnerability which allows concurrent writes to the same AFALG socket causing data to be unpredictably interleaved and creating inconsistencies in the socket's internal state...

POC-Bash-CVE-2021-3560

Bash-CVE-2021-3560 POC Bash —— CVE-2021-3560 Polkit 本地权限提升漏洞利用 本仓库提供了一个针对 CVE-2021-3560 的 bash 漏洞利用 ，该漏洞是 polkit 中的一个本地权限提升漏洞，影响许多现代 Linux 发行版。 !!!!!! 测试中可能导致系统不稳定 !!!!! 💥 漏洞摘要 该漏洞由 Kevin Backhouse 发现，非特权用户可通过 dbus 接口与 polkit 授权检查进行竞争，从而创建具有管理员权限的帐户。 受影响软件包 ：polkit = 0.119 CVE 编号 ：CVE-2021-3560 影...

CVE-2026-73638

Imager versions from 0.4502 before 1.035 for Perl read outside the EXIF block via unchecked start offsets in tiffloadifd. tiffloadifd validates an IFD entry's data by checking that entry-offset + entry-size stays within the EXIF block, and never checks the start offset itself. Where that sum is n...

CVE-2026-93380

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93380

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-93380

CVE-2026-93380 is a race condition in the FileSystem component of Google Chrome prior to 153.0.8010.52 . A remote attacker who had already compromised the renderer process could leverage social engineering to deliver a crafted HTML page, enabling bypass of system access restrictions . The Chromiu...

EUVD-2026-82484

Race condition in FileSystem in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

requests-racer

Requests-Racer Requests-Racer es una pequeña librería de Python que le permite utilizar la librería Requests para enviar múltiples solicitudes que serán procesadas por sus servidores de destino aproximadamente al mismo tiempo, incluso si las solicitudes tienen destinos diferentes o payloads de...