Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net: mscc: ocelot section, there was an issue where the IFH SRCPORT field in ocelotifhsetbasic was incorrectly set. Packets injected by the CPU should have the SRCPORT field equal to the CPU port module index in the Analyz...

Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ovl: Use the “buf” flexible array as the destination for memcpy. The “buf” flexible array must be used as the destination for memcpy to avoid false positive run-time warnings caused by the recent FORTIFYSOURCE hardening measures:...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: misc: lis3lv02di2c: Fixed the issue where regulators were disabled twice during suspension/resumption. When lis3lv02di2csuspend is not configured for wakeup, it will call lis3lv02dpoweroff, even if the device has already been...

CVE-2022-20465115

creationtimestamp| type| source ---|---|--- 2026-08-24 10:00:03+00:00| seen| https://t.me/xhqcankao/3842 2026-08-25 00:00:24+00:00| seen| https://t.me/xhqcankao/3842...

CVE-2026-78201

creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...

CVE-2026-78211

creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...

PT-2026-80895

RansomLook contains a stored cross-site scripting XSS vulnerability in the cryptocurrency wallet detail view. Cryptocurrency addresses and blockchain names originating from external sources, including the public crowd-sourced ransomwhe.re feed, were stored without sufficient validation and later...

JAR Component DoS

The vulnerability of the JAR component in Firefox and Firefox ESR web browsers, as well as in the Thunderbird email client, is related to a deficiency in the source verification mechanism. Exploiting this vulnerability can allow an attacker to cause service failures...

Grafana OSS: Stored XSS via external Alertmanager generatorURL

An authenticated attacker with Editor access or alert.instances.external:write can submit an external Alertmanager alert containing a controlled generatorURL . The attacker is authorized to create the alert, but not to execute script in another user's Grafana session. Grafana renders...

PT-2026-79841

authentik is an open-source identity provider. Prior to 2026.2.6 and 2026.5.5, a diagnostic action on the LDAP Source API does not enforce the object-level read-authorization filter used by the rest of the API. Any party able to reach the API, including an unauthenticated client, can invoke the...

Unbound DNS Server Unauthorized Access

The vulnerability of the Unbound DNS server is related to deficiencies in the mechanism for verifying data sources. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Dark-Moon v1.3.1

The Open-Source AI-Powered Autonomous Penetration Testing Platform The only autonomous AI pentester where the model never sees your real IPs, hostnames or credentials. As featured in Help Net Security · Cyber Security News · SecurityBrief · LinuxLinks · IT Brief · ChannelLife Full Documentation ·...

hoverfly v1.12.12

API simulations for development and testing Hoverfly is a lightweight, open source API simulation tool. Using Hoverfly, you can create realistic simulations of the APIs your application depends on. Replace slow, flaky API dependencies with realistic, re-usable simulations Simulate network latency...

CVE-2026-16686

creationtimestamp| type| source ---|---|--- 2026-08-23 20:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtrnen4qmm23...

CVE-2026-78183

creationtimestamp| type| source ---|---|--- 2026-08-23 20:20:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3oxdo3eesu6f4 2026-08-23 20:39:46+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/6rdunbaghb54q 2026-08-25 20:20:04+00:00| seen|...

CVE-2026-75922

creationtimestamp| type| source ---|---|--- 2026-08-23 18:54:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2qowb4i2bolr 2026-08-23 20:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli 2026-08-24 07:32:16+00:00| seen|...

traccar v6.15.2

Traccar Overview Traccar is an open source GPS tracking system. This repository contains Java-based back-end service. It supports more than 200 GPS protocols and more than 2000 models of GPS tracking devices. Traccar can be used with any major SQL database system. It also provides easy to use RES...

CVE-2026-76391

creationtimestamp| type| source ---|---|--- 2026-08-23 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtreygba6q2u...

CVE-2026-7808

creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyueefk223 2026-08-23 15:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2l6kg4p2m 2026-08-23 16:07:19+00:00| seen|...

CVE-2026-5388

creationtimestamp| type| source ---|---|--- 2026-08-23 14:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtqyucsev325 2026-08-23 15:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtr2mhxlsl27 2026-08-23 15:32:16+00:00| seen|...