Astra Linux – Vulnerability in WebKit2GTK

A logic issue has been resolved through improved restrictions. This issue is fixed in tvOS 14.6, iOS 14.6, iPadOS 14.6, Safari 14.1.1, macOS Big Sur 11.4, and watchOS 7.5. A malicious application may be able to leak sensitive user information...

Astra Linux – Vulnerability in openimageio

There is an information disclosure vulnerability in the DPXOutput::close function of the OpenImageIO Project, specifically in OpenImageIO v2.4.4.2. A specially crafted ImageOutput object can lead to the leakage of heap data. An attacker can provide malicious input to trigger this vulnerability...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Animation in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Jms Blog - SQL Injection

The module Jms Blog jmsblog from Joommasters contains a Time Based SQL injection vulnerability. This module is for the PrestaShop e-commerce platform and mainly provided with joommasters PrestaShop themes id: CVE-2023-27034 info: name: Jms Blog - SQL Injection author: MaStErChO severity: critical...

LockBit-Tattoo

LockBit-Tattoo Electronic: ID: 272784 Joined: Jul 20, 2022 Male: BTC: 3HeNJmgecLNHEhVn3JMcboybTgiFx4DGe3 Media: photo2022-09-0822-15-38.jpg Female: BTC: 3HC5eCcYtW27jhD59mg4U3haWr36teiLXB Media: photo2022-09-1101-07-49.jpg photo2022-09-1101-07-54.jpg DegB2W: ID: 272203 Joined: Jul 16, 2022 Male:...

CVE-2026-89673

A flaw was found in the Linux kernel's NFS daemon nfsd. A remote attacker could exploit an error in the XDR External Data Representation padding calculation within the ffencodegetdeviceinfo function. This mismatch between reserved and actual data size leads to the leakage of stale reply-page...

CVE-2026-89673

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ffencodegetdeviceinfo nfsd4ffencodegetdeviceinfo computes the daaddrbody reservation as 16 + netidlen + addrlen, but the subsequent xdrencodeopaque calls emit 8 + roundupnetidlen, 4 +...

AZL-100091 CVE-2026-89673 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ffencodegetdeviceinfo nfsd4ffencodegetdeviceinfo computes the daaddrbody reservation as 16 + netidlen + addrlen, but the subsequent xdrencodeopaque calls emit 8 + roundupnetidlen, 4 +...

CVE-2026-89631

In the Linux kernel, the following vulnerability has been resolved: smb: client: reject a tree connect response whose byte count is too small CIFSTCon bounds its strnlen over the byte area with the server's ByteCount minus two, which for ByteCount 0 or 1 goes negative as an int and converts to a...

EUVD-2026-76585

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ffencodegetdeviceinfo nfsd4ffencodegetdeviceinfo computes the daaddrbody reservation as 16 + netidlen + addrlen, but the subsequent xdrencodeopaque calls emit 8 + roundupnetidlen, 4 +...

CVE-2026-89673

A Linux kernel bug in the nfsd flexfiles implementation causes a XDR padding miscalculation in nfsd4_ff_encode_getdeviceinfo(). The function reserves space as 16 + netid_len + addr_len, but the subsequent xdr_encode_opaque() calls actually emit 8 + round_up(netid_len, 4) + round_up(addr_len, 4) b...

CVE-2026-89673 nfsd: fix XDR padding calculation in ff_encode_getdeviceinfo

In the Linux kernel, the following vulnerability has been resolved: nfsd: fix XDR padding calculation in ffencodegetdeviceinfo nfsd4ffencodegetdeviceinfo computes the daaddrbody reservation as 16 + netidlen + addrlen, but the subsequent xdrencodeopaque calls emit 8 + roundupnetidlen, 4 +...

CVE-2026-89480 nvme-tcp: reject a read that transferred too few bytes

In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: reject a read that transferred too few bytes nvmetcprecvdata completes a request once the current C2HData PDU has been consumed. Nothing compares the total bytes received against the length the command asked for: struct...

CVE-2026-80927

CVE-2026-80927 affects the Linux kernel timekeeping subsystem. In __do_adjtimex(), a race condition allows the auxiliary clock to be disabled during tk_get_aux_ts64() and re-enabled before the tks->clock_valid check, causing uninitialized stack data to be used in calculations and indirectly le...

CVE-2026-80927 timekeeping: Check the return value of tk_get_aux_ts64 in __do_adjtimex()

In the Linux kernel, the following vulnerability has been resolved: timekeeping: Check the return value of tkgetauxts64 in doadjtimex If the auxiliary clock is disabled during tkgetauxts64 but is enabled before tks-clockvalid is checked, then uninitialized stackdata will be used in the calculatio...

CVE-2026-62137

An unauthenticated Sensitive Data Exposure vulnerability affects the WordPress bbPress plugin in versions 2.6.14 and earlier , as discovered by Ananda Dhakal via Patchstack . The flaw allows a remote attacker with no prior access to expose sensitive data, carrying a CVSS 3.1 score of 5.3 (Medium)...

ransomwatch

ransomwatch 👀 🦅 ransomwatch trails the extortion sites used by ransomware groups and surfaces an aggregated feed of claims please use the issue template when submitting new groups ⚠️ content withinransomwatch.telemetry.ltd, posts.json, groups.json alongside the docs/ & source/ directories is...

CVE-2021-35042

CVE-2021-35042: Django SQL injection vulnerability I. Overview Django is an open-source Web Application Framework written in Python, built according to the MVC Model - View - Controller model. It was originally built to manage news content websites owned by the Lawrence publishing corporation, as...

pwndb

pwndb.py pwndb.py is a python command-line tool for searching leaked credentials using the Onion service with the same name. Usage root@kitploit: usage: pwndb.py -h --target TARGET --list LIST --output OUTPUT --proxy PROXY optional arguments: -h, --help show this help message and exit --target...

Oblivion

Oblivion es una herramienta enfocada en la monitorización en tiempo real de nuevas filtraciones de datos, notificando si las credenciales del usuario se han filtrado. También es posible verificar si alguna credencial del usuario se ha filtrado anteriormente. Oblivion tiene dos modos: Oblivion...