699170 matches found
CVE-2026-99126 s390/ctcm: Prevent XID null dereference
In the Linux kernel, the following vulnerability has been resolved: s390/ctcm: Prevent XID null dereference The mpcvalidatexid function sets grp-savedxid2-xid2flag2 to 0x40 to signal XID validation error. If peer XID is NULL or r/w channel pairing mismatch happens, grp-savedxid2 is never...
CVE-2026-99125 s390/pai: Handle multiple PMU stop callback invocations
In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...
EUVD-2026-111877
In the Linux kernel, the following vulnerability has been resolved: s390/pai: Handle multiple PMU stop callback invocations Handle the following scenario: The kernel protects itself against a very high sampling load and throttles the sampling using: perfeventthrottle -- PMU-stop Shortly later the...
CVE-2026-99107
A flaw exists in the Linux kernel's NTFS file system driver where the ntfs_new_attr_flags() function passes an incorrect Master File Table (MFT) record pointer to ntfs_attr_record_resize(). Specifically, when an attribute resides in an extent record , the driver provides the base record pointer i...
EUVD-2026-112007
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfsattrrecordresize ntfsnewattrflags passes the wrong MFT record to ntfsattrrecordresize. When the attribute is in an extent record, ctx-mrec points to the extent but the function...
CVE-2026-99107 ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfsattrrecordresize ntfsnewattrflags passes the wrong MFT record to ntfsattrrecordresize. When the attribute is in an extent record, ctx-mrec points to the extent but the function...
CVE-2026-99107 ntfs: fix incorrect MFT record pointer passed to ntfs_attr_record_resize
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix incorrect MFT record pointer passed to ntfsattrrecordresize ntfsnewattrflags passes the wrong MFT record to ntfsattrrecordresize. When the attribute is in an extent record, ctx-mrec points to the extent but the function...
ai-data-engineering-100-pocs
100 Real-World AI & Data Engineering POCs One hundred reprodu...
CVE-2026-112197 Missing Authentication for Critical Function in Tactis' NoviGest Desktop App
Vulnerability due to a lack of authentication in critical functions of the NoviGest Desktop App's Java RMI service. An attacker with network access to the service can invoke remote methods without authentication, obtain sensitive credentials, and execute arbitrary SQL queries on PostgreSQL. The...
darc
darc - Darkweb Crawler Project For any technical and/or maintenance information, please kindly refer to the |docs|. .. |docs| replace:: Official Documentation .. docs: https://darc.jarryshaw.me NB : Starting from version 1.0.0, new features of the project will not be developed into this public...
Critical: Red Hat Security Advisory: webkitgtk4 security update
An update for webkitgtk4 is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
webkitgtk: use-after-free of JSCValue function parameters
A flaw was found in WebKitGTK. Processing malicious web content can cause a use-after-free issue due to improper memory handling and result in memory corruption...
cve-2015-4843-type-confusion-phrack
Description Deatils for the vulnerability is disucssed on confluence. This repo has been picked up after a few years on being dead, not looked at the DisabledSecurityManager code. TypeConfusionDemo OverflowDemo This is a demo that shows we can overflow into before the dst array. This demo works o...
CVE-2026-92797
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the saveprofilefields function that uses an isset condition at line 1119, allowing the security check to be completely...
K000164033: Multiple Linux kernel vulnerabilities
Security Advisory Description CVE-2026-46142 In the Linux kernel, the following vulnerability has been resolved: net: libwx: fix VF illegal register access Register WXCFGPORTST is a PF restricted register. When a VF is initialized, attempting to read this register triggers an illegal register...
CVE-2026-92797 Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the saveprofilefields function that uses an isset condition at line 1119, allowing the security check to be completely...
EUVD-2026-111817
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the saveprofilefields function that uses an isset condition at line 1119, allowing the security check to be completely...
CVE-2026-92797 Memberpress <= 1.14.1 - Cross-Site Request Forgery via 'user_email' Parameter
The MemberPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.14.1. This is due to a bypassable nonce verification check in the saveprofilefields function that uses an isset condition at line 1119, allowing the security check to be completely...
CVE-2026-92797
The MemberPress plugin for WordPress (versions up to and including 1.14.1 ) is vulnerable to Cross-Site Request Forgery (CSRF) . The root cause is a bypassable nonce verification check within the save_profile_fields() function; specifically, using an isset() condition at line 1119 allows attacker...
proxylogon-exploit
proxylogon Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065, which allows for unauthenticated remote code execution on Microsoft Exchange as described in the following resources: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...