Linux nfsd4 DropRevokedStid() DoS

The vulnerability of the nfsd4 DropRevokedStid function in the fs/nfsd/nfs4state.c component of the Linux operating system is related to insufficient resource control with dynamic management. Exploiting this vulnerability could allow a remote attacker to cause service failures...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the getsrqwqe function in the drivers/infiniband/sw/rxe/rxeresp.c component of the Linux kernel is related to insufficient resource control during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux GPU Host1x pin_job() Buffer Overflow

The vulnerability of the pinjob function in the drivers/gpu/host1x/job.c component of the Linux kernel is related to improper handling of exceptional conditions. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

PT-2026-116163

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.6.0 Description An incorrect privilege assignment exists in the backend where the UpdateUser function in backend/api/handlers/users.go allows the PasswordHash to be set for any target account without verifying if the...

PT-2026-116131

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC DUMP replies to a client application that uses the pmap getmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocatio...

PT-2026-115626

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The storage status-change REST service allows location records associated with DICOM instances to be transitioned to deletion-related states. Specifically,...

PT-2026-116110

Netcore NR256CN through 1.5.140116 contains a pre-authentication stack overflow vulnerability in the Boa web server's user ok function, which copies Basic-auth usernames with unbounded strcpy calls into 64-byte stack buffers. Unauthenticated attackers can send a username longer than 63 bytes to a...

PT-2026-116109

Netcore NR256CN through 1.5.140116 contains a NULL pointer dereference vulnerability in the Boa web server's user auth function that allows unauthenticated attackers to crash the server via a malformed Authorization header. Attackers can send a Basic Authorization value lacking a colon, such as o...

PT-2026-116143

ZoneMinder is a free, open source closed-circuit television software application. Prior to 1.38.3, the exportEvents function concatenates the attacker-controlled exportFile request parameter into a shell command without neutralizing shell metacharacters when an authenticated user with View Events...

PT-2026-115662

RIOT is an open-source microcontroller operating system designed for Internet of Things devices and other embedded systems. Prior to 2026.04, the ATWINC15x0 driver's atwinc15x0 sta set current ssid function uses strcpy to copy an SSID without checking the destination size. When MODULE ATWINC15X0...

PT-2026-115632

The package github.com/gomarkdown/markdown is a Go library for parsing Markdown text and rendering as HTML. Prior to 0.0.0-20260724235538-61af6e1e6971, parser.IsSafeURL in parser/parser.go slices url:nPath before the lenurl = nPath guard. A short destination causes a slice-bounds panic when the...

PT-2026-115582

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action also function, plugin, post type, post status, ids, loggedout, and POST post title' parameter in all versions up to, and including, 1.1.5 due to insufficient input...

PT-2026-116164

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.11.0 Description An authorization inconsistency exists in the AuthMiddleware.managerAuth function. When a request uses a valid environment access token via the X-Arcane-Agent-Token header, the system installs an...

Linux Distros Unpatched Vulnerability : CVE-2026-109383

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - undici is an HTTP client library for Node.js. In versions 4.0.0 through 6.29.0, 7.0.0 through 7.30.0, and 8.0.0 through 8.12.1, its Agent dispatcher passes its...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...

CVE-2025-55182

CVE-2025-55182 If you're looking for an actual explanation, msanft/CVE-2025-55182 has a nice one with a working PoC. This repository only contains some things I tried, which yielded interestingish results. ./thing.py now contains a working PoC, most of which was taken from...

CVE-2025-10046

CVE-2025-10046 - ELEX WooCommerce Google Shopping Author: Byte Reaper Description CVE-2025-10046 is a SQL injection vulnerability in the ELEX WooCommerce Google Shopping Product Feed plugin for WordPress, versions 1.4.3 and earlier. The issue resides in the includes/elex-manage-feed-ajax.php file...

Maverick

Maverick An Adaptix C2 agent built with Crystal Palace — a custom PIC Position Independent Code linker and PICO module system. Demonstrates how to build modular shellcode agents where each component transport, tasks, obfuscation is a separate PICO blob loaded at runtime. Note This agent does not...