CVE-2026-61854 VoiceSentinel: Race condition in report buffer cleanup can corrupt transcript data and cause unbounded disk growth

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report buffer feature has a race between retention cleanup and normal transcript writes. In reportbuffer.py, maybecleanup uses an unlocked dictionary for once-per-hour cleanup...

CVE-2026-61854

The VoiceSentinel real-time voice moderation system (versions 2.2.1 to 3.3.1 ) is vulnerable to a race condition in its optional report buffer feature. The root cause is located in report_buffer.py, where _maybe_cleanup() uses an unlocked dictionary for cleanup throttling, allowing simultaneous _...

CVE-2026-75882

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests...

CVE-2026-75882 Improper access control vulnerability in ESET Encryption products for Windows

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests...

EUVD-2026-113905

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests...

CVE-2026-75882

An improper access control vulnerability exists in ESET Endpoint Encryption and ESET Full Disk Encryption for Windows. This flaw allows an attacker with standard user permissions to access a device interface belonging to a privileged kernel driver and submit specially crafted requests. The docume...

CVE-2026-99136

A flaw was found in the Linux kernel's dm-crypt subsystem. A race condition occurs during pending disk encryption request processing where the error status is read before reference counting is completed. During concurrent input/output I/O operations, this flaw causes failed read or write operatio...

CVE-2020-11932

CVE-2020-11932 🐛🔍 Check CVE-2020-11932 and test for host relating to this vulnerability Usage Download git clone https://github.com/Staubgeborener/CVE-2020-11932 cd CVE-2020-11932 chmod +x cve-2020-11932.sh ./cve-2020-11932.sh With curl so no download bash curl -s...

CVE-2026-61854: jackh54 VoiceSentinel: VoiceSentinel is a real-time voice moderation system for Minecraft servers

VoiceSentinel is a real-time voice moderation system for Minecraft servers. From 2.2.1 until 3.3.1, the optional report buffer feature has a race between retention cleanup and normal transcript writes. In reportbuffer.py, maybecleanup uses an unlocked dictionary for once-per-hour cleanup...

CVE-2026-62300: filecoin-project filecoin-pin: Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service

Filecoin Pin is an IPFS Pinning Service API implementation that pins to Filecoin's PDP service. In daemon deployments up to and including version 1.1.0, POST /pins in src/filecoin-pinning-server.ts checks a caller-supplied CID with CID.parse and passes it to pinStore.pin, but does not enforce...

PT-2026-133528

An improper access control vulnerability in ESET Endpoint Encryption and ESET Full Disk Encryption allow attacker with standard user permissions access a device interface belonging to a privileged kernel driver and send specially crafted requests...

Nomad allocation data migration may allow host directory permission modification via symlink following

Summary HashiCorp Nomad and Nomad Enterprise are vulnerable to symlink following during same-client allocation data migration that may allow a malicious workload to change permissions and ownership of host directories. This could allow unauthorized access to host data or modification of host file...

CVE-2026-116132

A flaw was found in HTTP::Body. A remote attacker could cause a Denial of Service DoS by sending repeated incomplete multipart upload requests. The multipart parser creates a temporary file when a file part begins but fails to track or clean it up if the upload terminates prematurely, allowing an...

Critical: Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.5.2 enhancement update

Updated Red Hat Enterprise Linux AI 3.5.2 container disk images are now available. Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test, and run Granite family large language models LLMs for enterprise applications. This update provides the latest Red Hat...

CVE-2026-99131

A flaw was found in the XFS file system in the Linux kernel. An improper capability check verified a task's real credentials instead of its effective credentials, causing the system to treat certain attribute modifications as privileged. A user, particularly when modifying file ownership over a...

CVE-2026-63190

FearlessCMS is a flat-file content management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under admin/ perform privileged operations without isLoggedIn authentication checks, CSRF protection or adequate path validation. On PHP's built-in...

CVE-2026-63190 FearlessCMS: Unauthenticated debug scripts expose filesystem operations and XSS

FearlessCMS is a flat-file content management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under admin/ perform privileged operations without isLoggedIn authentication checks, CSRF protection or adequate path validation. On PHP's built-in...

CVE-2026-63190

FearlessCMS versions prior to 0.1.4 contain five unauthenticated debug/test PHP scripts under the admin/ directory. On PHP's built-in development server (including default Docker deployments), an authentication bypass exists because router.php fails to normalize URI prefixes, allowing /./admin/ t...

EUVD-2026-112405

FearlessCMS is a flat-file content management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under admin/ perform privileged operations without isLoggedIn authentication checks, CSRF protection or adequate path validation. On PHP's built-in...

CVE-2026-116132 HTTP::Body versions before 1.23_01 for Perl leave the temporary file of an incomplete multipart upload on disk

HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...