kernel: ip6: vti: Use ip6_tnl.net in vti6_changelink()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface vti6 component. An unprivileged local user, particularly within a user namespace, could exploit a vulnerability related to incorrect network namespace handling during the movement of a vti6 tunnel. This issue can lead to a kerne...

CVE-2015-0235

CVE-2015-0235 glibc gethostbyname-Fehler...

bughunters

bughunters.google.com recursos Este repositório hospeda recursos destinados a ajudar a comunidade do Google Bug Hunting a conduzir pesquisa de segurança como parte dos programas de recompensa por vulnerabilidades do Google apresentados em https://bughunters.google.com/. Google VRP Níveis de Domín...

Apache APISIX - Remote Code Execution

A default configuration of Apache APISIX with default API key is vulnerable to remote code execution. An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. When the admin key was changed or the port of Admin API was changed to a port different...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: expat: expat-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-devel-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-static-2.8.5-1.1.hum1 aarch64, s390x, x8664 expat-2.8.5-1.1.hum1.src src...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet8.0: aspnetcore-runtime-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-8.0-8.0.31-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-8.0-8.0.31-0.1.hum1 aarch64, x8664...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: dotnet9.0: aspnetcore-runtime-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-runtime-dbg-9.0-9.0.20-0.1.hum1 aarch64, x8664 aspnetcore-targeting-pack-9.0-9.0.20-0.1.hum1 aarch64, x8664...

wordpress-batch-rce-lab

wp2shell: WordPress Batch RCE Eine technische Analyse von CVE-2026-63030, einem Logikfehler im Batch-Endpunkt der REST-API im WordPress-Core, der es einer anonymen Anfrage ermöglicht, unter der Route und Berechtigungsprüfung einer anderen Anfrage zu laufen, und der sich mit CVE-2026-60137...

cve-2025-32463

CVE-2025-32463-sudo-chwoot PoC für CVE-2025-32463 - Sudo chroot Schwachstelle zur Privilegienausweitung Original-PoC sudo-chwoot.sh CTF-Demo chwoot-demo.c Dokumentation Detaillierte Analyse: https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot Sicherheitshinweis:...

Important: Red Hat Security Advisory: OpenShift Security Profiles Operator bug fix and enhancement update

An updated OpenShift Security Profiles Operator image that fixes various bugs and adds new enhancements is now available for the Red Hat OpenShift Enterprise 4 catalog. The OpenShift Security Profiles Operator v0.10.1 is now available. See the documentation for release information:...

DEBIAN-CVE-2026-98331

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via ieee80211ifremove, before it unregisters the netdev. However, it's possible...

AZL-106347 CVE-2026-98331 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via ieee80211ifremove, before it unregisters the netdev. However, it's possible...

CVE-2026-98331

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: unlist vifs when their netdev is unregistered mac80211 only removes vifs from the local-interfaces list when an interface is removed via ieee80211ifremove, before it unregisters the netdev. However, it's possible...

DEBIAN-CVE-2026-98271

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the operation...

AZL-106374 CVE-2026-98271 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the operation...

CVE-2026-98271

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the operation...

DEBIAN-CVE-2026-98252

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

AZL-106278 CVE-2026-98252 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

CVE-2026-98252

In the Linux kernel, the following vulnerability has been resolved: RDMA/core: fix refcount bug in iwpmgetnlmsgrequest iwpmgetnlmsgrequest initializes refcount after listaddtail making it accessible to global list where another CPU can krefget on nlmsgrequest causing a refcount "addition on 0" bu...

UBUNTU-CVE-2026-98271

In the Linux kernel, the following vulnerability has been resolved: net: skbuff: do not leave stale header offsets after pskbcarve pskbcarveinsideheader and pskbcarveinsidenonlinear remove the first bytes of a packet and reallocate skb-head. All the headers that were present before the operation...