The vulnerability of the run_work() function in Linux operating system kernels, which allows a hacker to trigger a service failure.

The vulnerability of the runwork function in Linux operating system kernels relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-53071

A flaw was found in the Linux kernel's Bluetooth Logical Link Control and Adaptation Protocol L2CAP implementation. A remote Bluetooth Low Energy BLE device can exploit this by sending a specially crafted L2CAP ECRED reconfiguration response. This can lead to the corruption of the channel list,...

CVE-2026-54842

Missing Authorization vulnerability in Royal Plugins Royal MCP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Royal MCP: from n/a through 1.4.25...

ROS-20260625-73-0010

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20260625-73-0005

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

ROS-20260625-73-0014

The vulnerability in gnutls is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

ROS-20260625-73-0006

The vulnerability in gnutls is related to incorrect input of configuration data. The vulnerability can be exploited remotely...

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to errors in the certificate validation process. This allows attackers to replace data or gain unauthorized access to protected information.

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker to remotely replace data or gain unauthorized access to protected information...

CVE-2026-7569

CVE-2026-7569 affects Quest NetVault Backup viewclient. The flaw is a Cross‑Site Scripting vulnerability in the viewclient webpage due to inadequate input validation, which can be combined with other issues to execute arbitrary code in the context of SYSTEM. Successful exploitation requires user ...

CVE-2026-7569 Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability

Quest NetVault Backup viewclient Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Quest NetVault Backup. User interaction is required to exploit this vulnerability in that the target must vis...

MAL-2026-6435 Malicious code in serverless-leo (npm)

The serverless-leo npm package was compromised as part of the Miasma worm campaign targeting the LeoPlatform npm ecosystem. On June 24, 2026, 20 LeoPlatform packages were published within a 3-second window by a threat actor who had taken over the npm account czirker belonging to the LeoPlatform...

EUVD-2026-38764

Jenkins Pipeline: Groovy Plugin 4331.v9d06ed4658ff and earlier does not restrict the types that can be instantiated through the Pipeline Snippet Generator, allowing attackers to instantiate types related to job or system configuration other than Pipeline steps...

Exploit for Deserialization of Untrusted Data in Facebook React

Mô phỏng khai thác React2Shell CVE-2025-55182 Lưu ý: -...

CVE-2026-13140

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e...

EUVD-2026-38736

Stored Cross-Site Scripting in the exposed AWS API key store of Thinkst Applied Research Canarytokens. Anonymous exploitation requires knowledge of a random identifier. This issue affects Canarytokens: from Docker tag sha-4116b92cb before sha-f5aa5c4e, from Git commit 4116b92cb before f5aa5c4e...

cve-research-agent

CVE Research Agent A CVE research agent built on Claude Code...

ROS-20260624-73-0035

The vulnerability in curl is related to errors in the certificate validation process. Exploitation of this vulnerability can be carried out remotely...

vulnerability-assessment-metasploitable2

Vulnerability Assessment — Metasploitable 2 A end-to-end vuln...

CVE-2020-15916

creationtimestamp| type| source ---|---|--- 2026-06-23 14:06:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/ec2ebfd8-d9b7-4f53-94e9-e12744080726 2026-06-30 12:19:07+00:00| exploited|...

Astra Linux – Vulnerability in Chromium

A stack buffer overflow in WebRTC in Google Chrome prior to version 146.0.7680.153 allowed a remote attacker to potentially exploit stack corruption through a crafted HTML page. Chromium security severity: High...