Exploit for CVE-2026-105030

CVE-2026-105030-poc A p...

[SECURITY] Fedora 45 Update: rarian-0.8.6-8.fc45

Rarian is a documentation meta-data library that allows access to documents, man pages and info pages. It was designed as a replacement for scrollkeeper...

[SECURITY] Fedora 45 Update: PDAL-2.10.2-5.fc45

PDAL is a BSD licensed library for translating and manipulating point cloud data of various formats. It is a library that is analogous to the GDAL raster library. PDAL is focused on reading, writing, and translating point cloud data from the ever-growing constellation of data formats. While PDAL ...

[SECURITY] Fedora 45 Update: nexus-4.4.3-28.fc45

NeXus is common data format for neutron, x-ray, and muon science. This package provides tools and libraries for accessing these files. The on disk representation is based upon either HDF4, HDF5 or XML...

[SECURITY] Fedora 45 Update: kitinerary-26.08.1-2.fc45

A library containing itinerary data model and itinerary extraction code...

[SECURITY] Fedora 45 Update: gnome-app-list-2026.08-2.fc45

The gnome-app-list provides an AppStream data, which marks some apps as featured or highlighted in GNOME...

[SECURITY] Fedora 45 Update: evolution-data-server-3.62.0-2.fc45

The evolution-data-server package provides a unified backend for programs tha t work with contacts, tasks, and calendar information. It was originally developed for Evolution hence the name, but is now used by other packages...

[SECURITY] Fedora 45 Update: chemical-mime-data-0.1.94-44.fc45

A collection of data files which tries to give support for various chemical MIME types chemical/ on Linux/UNIX desktops. Chemical MIME's have been proposed in 1995, though it seems they have never been registered with IANA...

Linux Distros Unpatched Vulnerability : CVE-2026-94636

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper handling of highly compressed data data amplification, Function call with incorrectly specified arguments, Improper validation of specified quantity in...

Linux Distros Unpatched Vulnerability : CVE-2026-66054

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of Resources Without Limits or Throttling, Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++ bindings...

PT-2026-104491

The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slidesShow' Block Attribute in all versions up to, and including, 4.6.6 due to insufficient input sanitization and...

CVE-2026-97337: Missing Authorization

The Simple Membership plugin for WordPress is vulnerable to unauthorized modification of data and sensitive information disclosure in versions up to, and including, 4.8.3 via the resend-activation and email-activation endpoints. The endpoints are dispatched from...

CVE-2026-91078: Improper Authentication

The TillKit WordPress plugin before 1.0.5 does not require the hard-coded, publicly known PIN of the privileged POS account it creates on activation to be changed before use, and it authenticates its public POS login endpoint on that PIN alone with no identity or capability check, allowing...

CVE-2026-92727: Improper Neutralization of Input During Web Page Generation

The EmbedPress – PDF Embedder, 3D PDF FlipBook, Google Reviews, YouTube Videos, Upload & Embed PDF documents plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'slidesShow' Block Attribute in all versions up to, and including, 4.6.6 due to insufficient input sanitization and...

CVE-2026-86834: Exposure of Sensitive Information to an Unauthorized Actor

The MetForm WordPress plugin before 4.3.1 does not properly restrict access to a debug file it writes to the web root on every form submission when its HubSpot Forms integration is enabled, allowing unauthenticated attackers to read upstream API response data, including correlation identifiers an...

Forecasting Cybersecurity Incidents Using Geopolitical Data and Large Language Models

Predicting security incidents is a profound task critical for informing proactive defensive measures and cyber-insurance policies. Prior work tackling this problem mainly utilized structured, manually defined features based on network measurements e.g., protocol misconfigurations. Still, despite...

Fedora 43 : cockpit-machines (2026-4923296720)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-4923296720 advisory. Automatic update for cockpit-machines-357-1.fc43. Changelog for cockpit-machines Wed Sep 23 2026 Packit - 357-1 - Harden against local attacks from...

Linux Distros Unpatched Vulnerability : CVE-2026-103621

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow in Compositing in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...

PT-2026-104522

Name of the Vulnerable Software and Affected Versions WP Ultimate CSV Importer versions prior to 9.2 Description The plugin fails to use a site-specific secret when determining the storage location for import logs within the uploads directory. Additionally, it does not block direct access to thes...

PT-2026-104530

Name of the Vulnerable Software and Affected Versions TillKit WordPress plugin versions prior to 1.0.5 Description The plugin creates a privileged POS account upon activation that uses a hard-coded, publicly known PIN. The system does not require this PIN to be changed before use and authenticate...