Linux Distros Unpatched Vulnerability : CVE-2026-99134

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mac802154: fix data race and NULL deref on local-assocdev local-assocdev is shared between the association path and the association-response worker without comm...

PT-2026-128234

Insertion of Sensitive Information Into Sent Data vulnerability in Supsystic Contact Form by Supsystic contact-form-by-supsystic allows Retrieve Embedded Sensitive Data.This issue affects Contact Form by Supsystic: from n/a through 1.10.5...

Linux Distros Unpatched Vulnerability : CVE-2026-116729

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libfvde through 20260923 contains a heap out-of-bounds read vulnerability in libfvdeencryptedmetadatareadtype0x001a caused by an unbounded strlen on embedded XM...

CVE-2026-59979: Authorization Bypass Through User-Controlled Key

YosemiteCrew provides organization-based service and task management. In the source-reported affected main and dev snapshots, YosemiteCrew's service and PMS task-library/template routes omit organization and permission checks. authorizeCognito in apps/backend/src/middlewares/auth.ts sets the...

CVE-2026-116794: Eugeny russh: russh is a Rust SSH client and server library that includes an SSH agent protocol implementation

russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From 0.50.0-beta.12 until 0.65.0, the agent server's Connection::trysign path in russh/src/keys/agent/server.rs recognizes SSHAGENTCONSTRAINCONFIRM but returns a hard-coded successful result instead ...

CVE-2026-118617: Deserialization of Untrusted Data

Ultralytics loaddatasetcachefile Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must...

Linux Distros Unpatched Vulnerability : CVE-2026-118176

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths...

CVE-2026-118666: Exposure of Sensitive Information to an Unauthorized Actor

GraphQL Tools provides utilities for building, stitching, and mocking GraphQL schemas. Prior to version 1.1.36 of the GraphQL Tools legacy WebSocket executor package, buildWSLegacyExecutor in packages/executors/legacy-ws/src/index.ts reuses one WebSocket and replaces its single websocket.onmessag...

(0Day) Ultralytics load_dataset_cache_file Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ultralytics. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the loaddatasetcachefi...

Spring AI 2.1 Message Parts: Reasoning That Survives the Round Trip

Spring AI: Message Parts Doc | Upgrade Notes | OpenAI Responses Doc | Session Doc Reasoning models do more than think before they answer. They hand part of that thinking back to you and expect to get it back on the next request. Claude signs its thinking blocks. Gemini attaches thought signatures...

Linux Distros Unpatched Vulnerability : CVE-2026-116748

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Transmission 4.0.0 before 4.1.3 contains a permissive CORS vulnerability in handlerequest in rpc- server.cc that exposes the X-Transmission-Session-Id anti-CSRF...

bettercap

This repository is DEPRECATED, bettercap developementmoved here and every version 2.0.0 is considered LEGACY and NOT SUPPORTED...

AntiCropalypse

March 31st, 2023 Update As of today, Discord's CDN now strips trailing data from PNGs in-flight, meaning that even old uploads are now safe from the aCropalypse vulnerability. As such, this bot is no longer necessary, but it will remain online to allow users to download their archived images. The...

mitmAP

| / \ | \ | | / /\ | |/ / | ' | | | ' | || / | | | | | | | || | | | | | | | || | || || ||||| || || |/| 2.2 ⚠️ Warning! This project is no longer maintained and may not work as excepted. A python program to create a fake AP and sniff data. new in 2.0: SSLstrip2 for HSTS bypass Image capture...

CVE-2026-98974

A flaw was found in the Linux kernel's XFS file system. This vulnerability allows a local user to cause unauthorized data modification or potential privilege escalation by bypassing Copy-on-Write CoW protections. When exchanging file data ranges up to the end of a file, the file system incorrectl...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

MITM-cheatsheet

MITM-cheatsheet We tried to put together all known MITM attacks and methods of protection against these attacks. Here is also contains tools for carrying out MITM attacks, some interesting attack cases and some tricks associated with them. Note: Almost all attack tools, described here, doesn't ha...

DEBIAN-CVE-2026-116695

Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the remnants of a bad URL. Crass therefore keeps declarations, style rules, or at-rules insi...

CVE-2026-116695

Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the remnants of a bad URL. Crass therefore keeps declarations, style rules, or at-rules insi...

CVE-2026-116695

Crass is a Ruby CSS parser that is compliant with the CSS Syntax Level 3 specification. Prior to 1.0.8, Crass incorrectly treats a closing parenthesis after an escaped backslash as escaped while consuming the remnants of a bad URL. Crass therefore keeps declarations, style rules, or at-rules insi...