PT-2026-96284

Name of the Vulnerable Software and Affected Versions NotebookLM MCP versions 1.6.0 through 2.0.2 Description NotebookLM MCP contains a path traversal issue where attacker-controlled values in the vault dir and slug prefix variables can cause Markdown and JSON files to be written outside the...

Exploit for Interpretation Conflict in Wordpress

wp2shell-PoC ⚠ This tool is created solely for education...

CVE-2026-93596

ArcadeDB (com.arcadedb:arcadedb-engine) versions before 26.9.1 (≤ 26.8.1) suffer an authorization bypass in the parallel edge-connect phase of POST /api/v1/batch/{database}. The authenticated principal is not bound onto the DatabaseAsyncTransaction async worker threads, causing LocalDatabase.chec...

CVE-2023-32233-reproduction

CVE-2023-32233 — Use-After-Free en nftables: Reproducción y análisis de causa raíz Lo que es este repositorio: mi reproducción práctica y estudio de CVE-2023-32233, un use-after-free en el subsistema nftables de Netfilter del kernel de Linux que permite la escalada local de privilegios, divulgado...

Linux Distros Unpatched Vulnerability : CVE-2026-90384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero...

CVE-2026-90384

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

DEBIAN-CVE-2026-90384

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

CVE-2026-90384 iomap: release the folio batch on iomap callback failures

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

CVE-2026-90384 iomap: release the folio batch on iomap callback failures

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

EUVD-2026-82045

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

CVE-2026-90384

CVE-2026-90384 affects the Linux kernel iomap subsystem. The folio batch mechanism used for iomap zero-range operations fails to release the batch when either ->iomap_end() or ->iomap_begin() callbacks fail, as the direct return paths bypass batch cleanup. The ->iomap_end() case is not p...

CVE-2026-90384: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: iomap: release the folio batch on iomap callback failures A sashiko review of an unrelated patch points out that the folio batch mechanism used for iomap zero range fails to release the batch in a couple error scenarios. If eithe...

EUVD-2026-80803

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated bat...

CVE-2026-92625: Missing Authentication for Critical Function

Control iD iDSecure versions prior to 4.8.3.0 are affected by an unauthenticated Denial of Service. The /api/license/restartService endpoint is reachable without authentication and invokes an internal routine that terminates the iDSecure service process and relaunches it by way of a generated bat...

CVE-2026-83489

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications component: Onboarding Batch Processes. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2026-83489

This vulnerability affects Oracle Banking Origination (Oracle Financial Services Applications), specifically the Onboarding Batch Processes component, in supported versions 14.5.0.0.0 through 14.9.0.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, which...

EUVD-2026-79776

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications component: Onboarding Batch Processes. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...

CVE-2026-91987 atomic-agents-stack before 1.1.0 Cost Guardrail Bypass via Unknown Model

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

EUVD-2026-78658

atomic-agents-stack before 1.1.0 contains a cost-guardrail bypass in the estimatebatchcost function that returns zero cost for unknown models not in the pricing table. Attackers can configure deployments with unknown model identifiers to bypass daily cost caps and exceed budget limits in parallel...

CVE-2026-83489: Improper Privilege Management

Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications component: Onboarding Batch Processes. Supported versions that are affected are 14.5.0.0.0-14.9.0.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP t...