PT-2026-96240

Name of the Vulnerable Software and Affected Versions Sync-in Server versions prior to 2.4.0 Description An issue exists where the POST /api/auth/token endpoint authenticates users using only a username and password, subsequently calling the getTokens function to return full access and refresh JS...

CVE-2026-58272: Observable Timing Discrepancy

Sync-in Server is an open-source platform for file storage, sharing, collaboration, and syncing. Versions prior to 2.4.1 contain an observable timing discrepancy in the login endpoint because authentication attempts for nonexistent accounts return without performing the bcrypt comparison used for...

PT-2026-95839

rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend method Fs.readZip in backend/archive/zip/zip.go accepts archive/zip.File.Name values from an untrusted central directory and exposes...

PT-2026-95843

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject parent-directory segments in source Object.Remote values before fs/list, fs/walk, fs/sync, and fs/operations pass those values to destination...

EUVD-2026-83263

Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/syncserver.py parsed the JWT's header and payload using base64 decoding, then passed the token to a jwt library call with options that effectively disabled signature verification. Th...

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

Summary The Mnemosyne sync server's authentication check decoded JWT bearer tokens but never verified their HMAC-SHA256 signatures. Any well-formed token was accepted, allowing an unauthenticated attacker to impersonate any user and read or modify their sync data. Severity: Critical CVSS 3.1:...

Malicious Package

Overview linkedin-sync is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-102290

Summary In affected versions, the URL of a remote MCP server is attacker-controlled at registration and is fetched server-side with no validation of the destination. There is no guard against loopback, link-local, RFC1918 private ranges, or the cloud metadata endpoint 169.254.169.254, so a use wi...

ROS-20260918-73-0045

The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-95576

Name of the Vulnerable Software and Affected Versions Mnemosyne versions prior to 3.10.1 Description The sync server uses JSON Web Tokens JWT to authenticate clients. An authentication check in mnemosyne/core/sync server.py parsed the JWT header and payload using base64 decoding but used library...

Linux Distros Unpatched Vulnerability : CVE-2026-93047

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/v3d: Associate BOs with every job that accesses them A submission can expand into a chain of jobs e.g. bin + render + cache clean. Implicit synchronization ...

CVE-2026-90286 drm/amdgpu/gfx6: Use PFP on the compute queues too

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they don't support draw commands. As opposed to GFX7 and newer which have a...

bramble v1.29.0-chromium

Bramble A password manager that keeps your secrets on your own devices. No account, no server holding your vault, no company to get breached and leak everything. You hold the vault, you hold the password, and that's it. Bramble runs where you do: Browser extension for Chromium browsers Brave,...

PT-2026-94603

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Bluetooth component where hci setup sync queues a conn handle t with a NULL destroy callback. This leads to a memory leak if the entry is cancelled, as hci cmd syn...

PT-2026-94601

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth MGMT component when a mesh send cancel command is cancelled. The mesh send cancel function queues a pending command with a NULL destroy callback,...

CVE-2026-90286: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx6: Use PFP on the compute queues too On GFX6, the compute rings use the same CP path as the graphics ring. The only difference is that they don't support draw commands. As opposed to GFX7 and newer which have a...

PT-2026-94600

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth MGMT component when an HCI command is cancelled. The mgmt hci cmd sync function queues pending commands with a NULL destroy callback, meaning they a...

PT-2026-94602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the Bluetooth subsystem when adv timeout expire passes a memory instance allocated via kmalloc to hci cmd sync queue without a destroy callback. This leads to...

PT-2026-94850

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the bcm-vk module where the bcm vk sync msgq function populates message queue information and sets the msgq inited variable. Because atomic set and atomic read...

PT-2026-93619

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists where the SYNC BO operation does not constrain its size, allowing a request for zero bytes to reach the drm clflush virt range function. This function performs an...