UBUNTU-CVE-2026-98255

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

CVE-2026-98255

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

UBUNTU-CVE-2026-98317

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

EUVD-2026-93302

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

CVE-2026-98317

The Linux kernel contains a vulnerability in the neighbour component where the NDTPA_INTERVAL_PROBE_TIME_MS parameter lacks proper validation. Specifically, the lack of a .validation_type allowed values like 0 to be accepted. Additionally, a u64 to u32 silent cast in nla_get_msecs() allowed large...

CVE-2026-98317 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

CVE-2026-98317 neighbour: Enforce min/max to NDTPA_INTERVAL_PROBE_TIME_MS.

In the Linux kernel, the following vulnerability has been resolved: neighbour: Enforce min/max to NDTPAINTERVALPROBETIMEMS. NDTPAINTERVALPROBETIMEMS sets .type and .min but misses .validationtype, so no validation is applied: ynl --family rt-neigh --do setneightbl \ --json '"name": "arpcache",...

EUVD-2026-93210

In the Linux kernel, the following vulnerability has been resolved: powerpc/iommu: Fix the overflow validation in iommutcecheckioba The commit b1af23d836f8 "KVM: PPC: iommu: Unify TCE checking" unified IOBA parameter checking across KVM and VFIO into iommutcecheckioba. While doing so, the passed ...

CVE-2026-98255 tcp: exclude old ACKs from tcp fast path

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

CVE-2026-98255

The Linux kernel contains a vulnerability where old Acknowledgements (ACKs) could bypass the fast path of the TCP stack. Specifically, ACKs before SND.UNA and after SND.NXT were not being properly validated, potentially allowing them to modify connection state or advance RCV.NXT prematurely. The ...

CVE-2026-98255 tcp: exclude old ACKs from tcp fast path

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcpack performs the appropriate validation and...

CVE-2026-98188

In the Linux kernel, the following vulnerability has been resolved: wifi: p54: validate curve data length in the calibration curve converters p54convertrev0 and p54convertrev1 read calibration curve data from the device-supplied EEPROM entry using channel and points-per-channel counts taken...

CVE20264893poc

Topologia: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Passos 1.vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces no-resolv no-hosts no-poll cache-size=1000 log-queries log-facility=-...

CVE-2025-70828

CVE-2025-70828 Resumo Uma vulnerabilidade de leitura arbitrária de arquivos foi descoberta no Datart v1.0.0-rc.3. O aplicativo falha ao validar adequadamente a URL de conexão JDBC durante a configuração da fonte de dados. Detalhes da Vulnerabilidade Tipo de Vulnerabilidade: Validação de Entrada...

CVE-2025-65640

CVE-2025-65640 1. भेद्यता जानकारी CVE ID: CVE-2025-65640 वर्तमान में आरक्षित भेद्यता प्रकार: संग्रहीत क्रॉस-साइट स्क्रिप्टिंग XSS CVSSv3 score: 6.3 AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N विक्रेता: Arket/Bluenext S.r.l. उत्पाद: Globe Document Intelligence प्रभावित संस्करण: 5.0.0.559 खोजकर्ता: Vincenz...

CVE-2026-50338

CVE-2026-50338 Bypass de autenticação entre emissores no Resource Server B2C do Spring Cloud Azure Descrição AadB2cResourceServerAutoConfiguration em spring-cloud-azure-autoconfigure constrói um JwtDecoder que confia em seis emissores da linha AAD login.microsoftonline.com, sts.windows.net,...

POC-CVE-2026-19679

CVE-2026-19679 — अपलोड किए गए फ़ाइलनामों की अपर्याप्त सैनिटाइज़ेशन इनपुट सत्यापन स्थिति: पुष्टि एक 6.7.2-14.el9 लैब पर 2026-08-20। POST /rest/auditFile tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" के साथ HTTP 200 लौटाया और AuditFile 1000002 पंजीकृत किया — शेल-मेटाकैरेक्टर फ़ाइलनाम...

CVE-2023-40037

CVE-2023-40037: Validação Incompleta de URLs de Conexão JDBC e JNDI no Apache NiFi Apache NiFi 1.21.0 até 1.23.0 suporta acesso JDBC e JNDI JMS em vários Processadores e Serviços do Controlador com validação de URL de conexão que não fornece proteção suficiente contra entradas maliciosamente...

CVE-2026-71206-PoC

CVE-2026-71206 — Shiori: دالة CheckToken الخاصة بـ JWT لا تعيد التحقق من حالة الحساب أبدًا المنتج: go-shiori/shiori الملف: internal/domains/auth.go CWE: CWE-613 — انتهاء صلاحية الجلسة غير كافٍ CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L — 8.2 مرتفع CNA: Turan Security · سجل CVE الوصف تتحقق دالة...

trufflehog v3.98.0

TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...