21842 matches found
PT-2026-65556
Name of the Vulnerable Software and Affected Versions Bridge affected versions not specified Description An out-of-bounds write occurs when a program writes data past the end of a buffer, potentially corrupting memory. This issue could result in arbitrary code execution in the context of the...
ALSA-2026:47040 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: xfrm: Duplicate SPI Handling CVE-2025-39797 kernel: lib/buildid: use kernelread for sleepable context CVE-2026-23002 kernel: futex: Drop CLONETHREAD requirement for private default hash...
Malicious Package
Overview sso-tramvai-module-context-auth is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and th...
Malicious Package
Overview react-context-form-tdsss is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...
MGASA-2026-0303 Updated x11-server x11-server-xwayland tigervnc packages fix security vulnerabilities
The updated packages fix security vulnerabilities: glamor Font Atlas Heap Buffer Overflow. CVE-2026-55999 GLX contextTags Use-After-Free in CommonMakeCurrent. CVE-2026-56000...
MINI-GQ2C-823G-JJGJ
Bulletin has no description...
be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.8.release), com.giffing.wicket.spring.boot.starter:wicket-spring-boot-context (>=4.0.0, <=5.0.0) +306 more potentially affected by CVE-2026-66391 via org.apache.wicket:wicket-util (>=10.0.0, <=10.9.1)
org.apache.wicket:wicket-util MAVEN version =10.0.0, =1.5.4.release, =4.0.0, =4.0.0, =1.0.0, =4.0.11, =4.0.3, =4.0.4, =7.0.3, =7.0.3, =7.0.11, =7.0.3, =7.0.3, =0.1.0, =0.1.0, =0.1.2 and more Source cves: CVE-2026-66391 Source advisory: MEND:CVE-2026-66391...
Rethinking security for the age of AI
Why security needs a new Cyber Stack — Introducing Project Perception The physics of cybersecurity are changing. Autonomous systems can now reason, adapt and operate continuously. At the same time, the cost of offense is falling, while the volume, velocity and complexity of what must be secured...
GO-2026-5116 Build breakout using malicious Containerfile or Git HTTP server in github.com/containers/buildah
Buildah allows a build-time breakout when using a malicious Containerfile or a malicious Git HTTP server. A crafted Git URL or Containerfile can cause Buildah to access files outside of the build context during an ADD or COPY operation...
MINI-4HQ2-H242-VXP7
Bulletin has no description...
MINI-6FHW-M38P-RPVC
Bulletin has no description...
CVE-2026-17523 can: bcm: switch timer to HRTIMER_MODE_SOFT and remove hrtimer_tasklet
In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMERMODESOFT and remove hrtimertasklet This patch switches the timer to HRTIMERMODESOFT, which executed the timer callback in softirq context and removes the hrtimertasklet...
pentest-confirm-mcp
pentest-confirm-mcp Model Context Protocol MCP server for...
K000162457: Linux kernel vulnerability CVE-2026-53106
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: bpf: Do not allow deleting local storage in NMI Currently, local storage may deadlock when deferring freeing selem or local storage through kfreercu, callrcu or callrcutaskstrace in NMI or reentrant...
PT-2026-65349
Buildah allows a build-time breakout when using a malicious Containerfile or a malicious Git HTTP server. A crafted Git URL or Containerfile can cause Buildah to access files outside of the build context during an ADD or COPY operation...
CVE-2026-17523: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: can: bcm: switch timer to HRTIMERMODESOFT and remove hrtimertasklet This patch switches the timer to HRTIMERMODESOFT, which executed the timer callback in softirq context and removes the hrtimertasklet...
CVE-2026-64229
In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86FEATUREPCID and keeps CR4.PCIDE from being set to one. On AMD CPUs that support INVLPGB, broadcast TLB flushing remains enabled. There are...
sharepoint-2026-poc
SharePoint /trust WS-Federation Deserialization — PoC & Det...