Linux Distros Unpatched Vulnerability : CVE-2026-89593

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hugetlb: only adjust reservation during unmapping if mapcount is 0 Since df7a6d1f6405, unmaphugepagerange can adjust reservations. In the case of folio mapped i...

PT-2026-90574

I discovered a CSRF vulnerability in BEAR – Bulk Editor and Products Manager Professional for WooCommerce. CVE-2026-84023 — Taxonomy Term Modification via CSRF Affected versions: 1.2.2 Fixed in: 1.2.2 https://t.co/VqYeibaeDi BugBounty CyberSecurity CVE WordPress...

Linux Distros Unpatched Vulnerability : CVE-2026-89560

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - landlock: Require LANDLOCKACCESSFSMAKEREG for whiteout creation Whiteout objects are used in the upper layer of an OverlayFS to indicate that the file with this...

Linux Distros Unpatched Vulnerability : CVE-2026-89701

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: validate nseconds in TIMEDELEG decode paths The xdrgen-based TIMEDELEGACCESS and TIMEDELEGMODIFY decode arms store a raw uint32t nseconds directly into...

Linux Distros Unpatched Vulnerability : CVE-2026-89566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jbd2: check needresched when skipping busy checkpoint buffers journalshrinkonecplist skips busy checkpoint buffers when called with JBD2SHRINKBUSYSKIP. The...

CVE-2026-89525

A flaw was found in the Linux kernel. A local attacker could craft a malicious Universal Disk Format UDF image to trigger an out-of-bounds read vulnerability in the udfgetpblockvirt15 function. This occurs when the system attempts to read a Virtual Allocation Table VAT index equal to the entry...

CVE-2026-89610

A flaw was found in the Linux kernel's NTFS component. The mapping pairs decoder fails to verify if a run length extends beyond the volume boundary. A local attacker could exploit this by providing a malformed NTFS image with a crafted mapping pairs array. This could lead to memory corruption and...

VMWare-CVE-Check

VMWare-CVE-Check Usage: ./example.py/sh list.txt...

CVE-2026-23111-POC-noddlenpottato

CVE-2026-23111 — noddlenpottato nftables catchall UAF → unprivileged LPE. user to root on most 5.10—6.18 linux kernels. auto-adapts to the target kernel — detects struct offsets, resolves symbols, finds ROP gadgets, determines slab cache, generates tailored exploit, compiles and runs. nftables...

CVE-2026-89694

A flaw was found in the Linux kernel's NFSv4.2 server nfsd. An authenticated NFSv4.2 client could exploit a vulnerability in the managecpntfstate function by guessing a state identifier. This improper ownership check allows the client to cancel and free another client's copy-notify stateid, leadi...

xz-backdoor-CVE-2024-3094-Check

xz-backdoor-CVE-2024-3094-Check Verify if your installed version of xz-utils is vulnerable to CVE-2024-3094 backdoor. This check is for Kali Linux or other Debian based installs. Usage root@kitploit: git https://github.com/Bella-Bc/xz-backdoor-CVE-2024-3094-Check.git cd...

CVE-2026-89439

A flaw was found in the Linux kernel's Intel Speed Select Technology ISST driver. A missing NULL check for isstcommon.sstinst during failed socket loading could allow a local attacker to trigger a NULL pointer dereference. This vulnerability could lead to a system crash, resulting in a Denial of...

Check-Point_poc

Check-Pointpoc Vulnerabilidad de lectura arbitraria de archivos en Check-Point Security Gateway CVE-2024-24919 python Check-Pointpoc.py -h root@kitploit: -. -. OO . OO . /. -. ,-.-'/. -. ,-.-' \ .' / | |OO\ .' / | |OO \ /\ | | \ \ /\ | | \ \ \ | | |/ \ \ | | |/ .' ,| |.' .' ,| |.' / .'. | | /...

@Mockoon/commons-server: Path traversal in templated `filePath` lets a request escape the served directory (prefix-only base check)

Summary A FILE response whose filePath embeds request data e.g. "/srv/public/queryParam 'name'", the documented way to let the client pick a file is confined by getSafeFilePath with resolvedPath.startsWithstaticBaseDir. That prefix test has no path-separator boundary, so a ../-escaped path whose...

CVE-2025-3102

🔐 CVE-2025-3102 – Bypass de Autenticación en el Plugin SureTriggers de WordPress 🚨 CVE-2025-3102 es una vulnerabilidad crítica de bypass de autenticación que afecta al plugin de WordPress SureTriggers: All-in-One Automation Platform , que está activamente instalado en más de 100,000 sitios web...

CVE-2026-45057

matrix-sdk-ui provides GUI-centric utilities on top of matrix-rust-sdk. The message edit validation logic in the matrix-sdk-ui crate prior to 0.17.0 is missing a check: when replacing an encrypted event, the replacement event itself is not required to be encrypted. This enables a malicious...

CVE-2026-47773

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...

CVE-2026-47773

ArduinoBLE (the Arduino library providing Bluetooth Low Energy connectivity on certain Arduino models) is vulnerable to memory corruption in versions prior to 2.0.2 . The root cause is a missing bounds check in the ATT layer write request handler, allowing a remote, unauthenticated BLE client to ...

CVE-2026-47773 ArduinoBLE: Memory corruption via malformed ATT write request

ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. Versions prior to 2.0.2 contain a missing bounds check in the ATT layer write request handler that allows a remote, unauthenticated BLE client to corrupt memory in the ATTClass global object. Devices running ArduinoBL...