CVE-2026-58058

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a craft...

CVE-2026-58058 Nmap - Integer Underflow in IPv6 Extension Header Parsing

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6getdataprimitive libnetutil/netutil.cc, so the pointer advances past the buffer and the remaining-length computation underflows to a large value. A scanned target or on-path attacker returning a craft...

Linux Distros Unpatched Vulnerability : CVE-2026-53317

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: mt76: mt7921: Place upper limit on station AID Any station configured with an AID over 20 causes a firmware crash. This situation occurred in our testing...

Linux Distros Unpatched Vulnerability : CVE-2026-52952

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iommu: Fix WARNON in iommugroupsetdomainnofail due to reset In iommugroupsetdomaininternal,...

Linux Distros Unpatched Vulnerability : CVE-2026-52950

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/dma-buf: fix UAF with retry loop Retry doesn't work here, since bo will be freed on...

Linux Distros Unpatched Vulnerability : CVE-2026-53234

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ibm: emac: Fix use-after-free during device removal The driver was using devmregisternetdev which causes unregisternetdev to be deferred until the devres...

Linux Distros Unpatched Vulnerability : CVE-2026-12245

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NSD from version 4.13.0 has a heap use-after-free bug in logging errors on TLS connections, causing a crash of the server process, which can be triggered...

sentinel

Sentinel — Agentic Code & System Quality Guardian Production-...

CVE-2026-49417: Use After Free

Second, the audio buffer backing a mapping could be freed when the device was closed even though the mapping remained valid. The freed memory could then be reused elsewhere while still accessible through the stale mapping. The /dev/dsp device nodes are world-accessible by default. On a system wit...

CVE-2025-59868: Insertion of Sensitive Information into Log File

HCL Traveler for Microsoft Outlook HTMO is susceptible to a sensitive data exposure vulnerability which could allow an attacker to exploit application information to then attempt additional attacks and cause unknown behavior in the application...

CVE-2026-49416: Integer Overflow or Wraparound

The CONSHISTORY ioctl handler did not adequately validate the requested history size. A large value caused an integer overflow in the buffer size calculation, resulting in a heap allocation smaller than expected. Subsequent initialization of the buffer wrote beyond the end of the allocation. An...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: rancher, kubescape-server-fips, gitea-fips, gatekeeper-fips, kube-arangodb-fips, opentofu, istio, opentelemetry-collector, trivy-fips, coder-fips, prometheus-fips, grafana-fips, falco-no-driver, tekton-pipelines-fips, kubernetes-dashboard, grafana, prometheus,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: containerd, pulumi-language-dotnet, kots, terraform-provider-azurerm, teleport, pulumi, k9s, vault-benchmark, argo-cd, age, cloud-provider-aws, kyverno, step-issuer, flux-source-controller, tkn, eksctl, pulumi-kubernetes-operator, cilium, gh, gitlab-kas, loki,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: helm, cert-manager, containerd, kots, osv-scanner, trivy, skaffold, chisel, flux, k9s, external-dns, prometheus, rancher, kubescape, spire-server, zot, aactl, cloud-provider-aws, mattermost, kyverno, falco-no-driver, prometheus-operator, rancher-agent, fscrypt,...

CVE-2026-55838

RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.7 and earlier, the real-time metrics endpoint at /rustfs/admin/v3/metrics is accessible to any valid IAM user regardless of their assigned policy. Every other admin handler in the codebase calls validateadminrequest to...

CVE-2026-55838

CVE-2026-55838 (RustFS) : In versions up to 1.0.0-beta.7, the real-time metrics endpoint /rustfs/admin/v3/metrics is accessible to any valid IAM user, because MetricsHandler skips the admin-request validation that other admin handlers perform. As a result, a user whose policy allows only their ow...

EUVD-2026-39863

RustFS is a distributed object storage system built in Rust. In 1.0.0-beta.7 and earlier, the real-time metrics endpoint at /rustfs/admin/v3/metrics is accessible to any valid IAM user regardless of their assigned policy. Every other admin handler in the codebase calls validateadminrequest to...

Sql-injection-scanner

Sql-injection-scanner Developing a security scanning tool that...

RF SDR Discovery

Detect software-defined radio USB devices and optionally run a quick spectrum sweep with rtlpower when rtl-sdr tools are installed. !/usr/bin/env python3 -- coding: utf-8 -- """Detect RTL-SDR dongles and run a quick RF power sweep when tools are available.""" from future import annotations import...

WiFi Client Enumerator

Passively enumerate wireless clients on a monitor-mode interface by observing probe requests, association frames, and data traffic. !/usr/bin/env python3 -- coding: utf-8 -- """Enumerate 802.11 wireless clients from probe, association, and data frames.""" from future import annotations from typin...