nah

expensive mistakes stop here a guard that blocks catastrophic agent actions nahguard.ai • what it blocks • how it decides • install • extend • threat model claude code · codex · cursor · pi · + 11 more nah is a guard that sits in your coding agent's hook path and reads tool calls before they run...

CVE-2026-89516

A flaw was found in the Linux kernel's schedext component. When a Deferred Scheduling Queue DSQ is destroyed, a pending deferred re-enqueue DRU operation might still attempt to access the destroyed DSQ. This can lead to a BUGON condition, causing a kernel panic and resulting in a Denial of Servic...

CVE-2026-89627

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

AZL-100359 CVE-2026-89627 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

CVE-2026-89516

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't BUGON a destroyed DSQ in processdeferredreenqusers scxbpfdsqreenq queues a deferred reenq dru that runs from rundeferred, not ops.dispatch. If the DSQ is destroyed before the dru runs, processdeferredreenqusers se...

EUVD-2026-76539

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

CVE-2026-89627

CVE-2026-89627 affects the Linux kernel 's HID roccat driver. The root cause is a memory leak : roccat_report_event() duplicates each report via kmemdup() into a circular buffer (cbuf[]), but the device destruction paths free struct roccat_device without releasing reports still stored in those sl...

CVE-2026-89627 HID: roccat: free buffered reports when destroying device

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

CVE-2026-89627 HID: roccat: free buffered reports when destroying device

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccatreportevent duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

CVE-2026-89516 sched_ext: Don't BUG_ON a destroyed DSQ in process_deferred_reenq_users

In the Linux kernel, the following vulnerability has been resolved: schedext: Don't BUGON a destroyed DSQ in processdeferredreenqusers scxbpfdsqreenq queues a deferred reenq dru that runs from rundeferred, not ops.dispatch. If the DSQ is destroyed before the dru runs, processdeferredreenqusers se...

BiBi-Windows-Wiper-Analysis

Technical Analysis of BiBi-Windows Wiper Targeting Israeli Organizations On 30th October, Security Joes Incident Response team discovered a new Linux Wiper named "BiBi-Linux" Wiper been deployed by Pro-Hamas Hacktivist group to destroy their infrastructure. And then on November 1 2023, ESET...

PT-2026-90343

In the Linux kernel, the following vulnerability has been resolved: HID: roccat: free buffered reports when destroying device roccat report event duplicates each report with kmemdup and stores the allocation in a circular-buffer slot. The allocation is released only when that slot is reused. The...

EUVD-2026-75638

Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB Rust Driver can cause a caller-supplied structured file identifier to be interpreted as a query condition rather than as a literal identifier. An authenticated user who can influence the...

CVE-2026-67593

An unauthenticated network attacker can delete arbitrary durable queues on any Apache Artemis broker with OpenWire protocol enabled default. The processRemoveSubscription method executes pre-authentication with no authorization check, and uses the internal destroyQueueSimpleString overload that...

CVE-2026-75861

The Ultimate Gift Cards for WooCommerce WordPress plugin (versions before 3.2.10 ) fails to verify that the user redeeming a gift card is its intended recipient. This allows any authenticated user with subscriber-level access to redeem another user's gift card, zeroing the original owner's balanc...

Stuxnet

Stuxnet This repository contains a strictly educational and research-oriented reconstruction of the infamous Stuxnet worm. It is the product of countless hours of reverse engineering work conducted by the global security research community on the original binary samples discovered in 2010...

CVE-2026-53760

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because these are top-level navigations, browsers include...

CVE-2026-53760 Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET Requests

Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installation, uninstallation, and update operations via GET requests without CSRF token validation. Because these are top-level navigations, browsers include...

CVE-2026-53760

Admidio versions 5.0.11 and prior are affected by a CSRF vulnerability in the modules/plugins.php endpoint. Plugin install, uninstall, and update operations are handled via GET requests without CSRF token validation. Because browsers send SameSite=Lax cookies on top-level navigations, an attacker...

The vulnerability of the nft_tunnel_objdestroy() function in the net/netfilter/nft_tunnel.c module of the netfilter component of the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the nfttunnelobjdestroy function in the net/netfilter/nfttunnel.c module of the netfilter component of the Linux operating system is related to the multiple release of the same resource or descriptor. Exploiting this vulnerability could allow an attacker to compromise the...