CVE-2026-68450

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert addrelocroot allocates a mappingnode before inserting it into rc-relocroottree. If rbsimpleinsert finds an existing entry, it returns the existing rbnode and leaves the newl...

CVE-2026-68450

The CVE-2026-68450 issue affects the Linux kernel’s btrfs relocation root handling. Specifically, __add_reloc_root() allocates a mapping_node before inserting it into rc->reloc_root_tree; if rb_simple_insert() finds an existing entry, it returns the existing rb_node and leaves the newly alloca...

PT-2026-70966

In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert add reloc root allocates a mapping node before inserting it into rc-reloc root tree. If rb simple insert finds an existing entry, it returns the existing rb node and leaves...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: HID: intel-ish-hid: Fixed a NULLptrderef issue in ishtpbusremoveallclients. During a warm reset process, the cl-device pointer may become NULL if the reset occurs while clients are still being enumerated. Accessing...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/buffer: An alert is added in trytofreebuffers for folios that have no buffers attached. trytofreebuffers can be called on folios with no buffers attached when filemapreleasefolio is invoked on a folio that belongs to a mapping...

Common-Web-Application-Bug-Classes-Cheatsheet

Common Web Application Bug Classes Cheatsheet A defensive ref...

Johnson Controls Inc. TL280

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to access sensitive information on the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for...

Exploit for Incorrect Resource Transfer Between Spheres in Linux Linux_Kernel

copyfail-guard Ferramenta de detecção e mitigação automatiz...

Exploit for CVE-2026-17543

PHP CVE-2026-17543 Exposure Validator Safe network-side valid...

igloohome Smart Lock Mobile Application

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an unauthorized actor to access functions or backend services. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure...

Exploit for Improper Authorization in Microsoft

cve-id Donate Support the maintenance of this project wit...

SUSE CVE-2026-53382

In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can return NULL, but vidtvmuxpushsi does not check for this before dereferenci...

CVE-2026-63996

CVE-2026-63996 concerns the Linux kernel ethtool cmis path. The issue arises when a malicious SFP module responds with a reply length longer than what cmis_cdb_process_reply() expects, potentially causing out-of-bounds writes. The fix involves strengthening the existing length checks to also guar...

CVE-2026-63996 ethtool: cmis: require exact CDB reply length

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: require exact CDB reply length Malicious SFP module could respond with rpllen longer than what cmiscdbprocessreply expected, leading to OOB writes. Malicious HW is a bit theoretical but some modules may just be bug...

Linux Distros Unpatched Vulnerability : CVE-2026-53382

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: vidtv: fix NULL pointer dereference in vidtvmuxpushsi syzbot reported a general protection fault in vidtvpsitspsiwriteinto 1. vidtvmuxgetpidctx can retur...

PT-2026-61313

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool CMIS component where the kernel does not properly validate the length of the Common Management Interface Specification CMIS Capability Data Block CDB reply...

Exploit for CVE-2026-63030

wp2r00t - WordPress REST Batch Route-Confusion SQLi PoC A sel...

Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware

log4shell-scanner A dependency-free, defensive scanner for...

📄 Strapi Filter Injection Administrator Password Reset

This tool assesses whether filter injection weaknesses can impact administrator account recovery workflows in Strapi deployments. It validates exposure conditions, evaluates enumeration risks, and analyzes password reset flow behavior for defensive security testing. Strapi versions starting in...

Anthropic Restores Claude Fable 5 After U.S. Lifts Jailbreak-Linked Export Controls

Anthropic is putting Claude Fable 5 back online worldwide. On June 30, the U.S. Commerce Department lifted the export controls it had imposed on Fable and its more tightly controlled sibling Mythos 5 about two and a half weeks earlier. Fable 5 returns to users on Wednesday, July 1, across...