CVE-2026-89444

A flaw was found in the Linux kernel. The dell-wmi-sysman driver, responsible for managing Dell WMI Windows Management Instrumentation system attributes, incorrectly logs sensitive information. Specifically, when setting a BIOS attribute, the driver populates a security buffer with the current...

CVE-2025-50110

CVE-2025-50110 Cleartext Transmission of Sensitive Information in EagleEyes Lite Android Application 1. Overview Name : EagleEyesLite Version : 2.0.0 Vendor : AVTECH CWE : CWE-319: Cleartext Transmission of Sensitive Information, CWE-598: Use of GET Request Method With Sensitive Query Strings CVS...

CVE-2026-78745

CVE-2026-78745 — Remote Code Execution via Android Debug Bridge ADB CVE-2026-78745 affects HiDPT / Weyon HiDPTAndroid devices using the Hi3751V350 and Hi3751V352EDMO platforms. The vulnerability allows a remote attacker to execute arbitrary code through the Android Debug Bridge adbd daemon...

CVE-2026-90457

CVE-2026-90457 involves an inconsistency in administrative password hashing across authentication paths in an ICS product (per CISA advisory ICSA-26-254-01). One path uses a weak, fast hashing algorithm , and the resulting hash file is written with permissions readable by any local user . A separ...

CVE-2026-90460

OpenStack Keystone before 29.0.3 has an authorization flaw in the /v3/credentials API . Tokens obtained via delegated authentication methods (EC2 credentials, application credentials, OAuth1 access tokens, and trusts) are not prevented from creating, modifying, or deleting credentials. EC2-derive...

CVE-2026-54241

libde265 is an open source implementation of the h.265 video codec. Versions prior to 1.1.1 use signed 32-bit arithmetic to calculate the sample adaptive offset input-buffer size, allowing a crafted HEVC stream with large dimensions and 16-bit luma samples to cause an integer overflow, an...

CVE-2026-50025

Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The service stores a MyAnonamouse MAM session...

boatcrash

boatcrash Exploit for CVE-2019-19030 that affects Harbor versions Use this script on Harbor instances running versions under 1.10.3 or 2.0.1 to enumerate all projects present in the platform. It can also be used to enumerate projects on higher versions but you will only be able to enumerate publi...

CVE-2026-50025 Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM cookie state

Mousehole is a background service to update a seedbox IP for MAM and web app to manage it. Prior to version 0.4.05, Mousehole's HTTP/WebSocket management boundary is reachable without application-layer authentication or browser/LAN provenance checks. The service stores a MyAnonamouse MAM session...

DEBIAN-CVE-2026-89765

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec is 64-bit while kernelsusecondst is 32-bit. putitimerval fills only t...

DEBIAN-CVE-2026-89642

In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecacheisizeextended in cifssetsize when extending cifssetsize calls truncatepagecache but skips pagecacheisizeextended on extension. truncatesetsize shows the correct pattern: isizewriteinode, newsize; if newsize...

CVE-2026-89642

In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecacheisizeextended in cifssetsize when extending cifssetsize calls truncatepagecache but skips pagecacheisizeextended on extension. truncatesetsize shows the correct pattern: isizewriteinode, newsize; if newsize...

AZL-100644 CVE-2026-89621 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: HID: mcp2221: validate report size in mcp2221rawevent mcp2221rawevent never validates the size of incoming HID reports. In the MCP2221I2CGETDATA path it trusts the device-supplied data3 as the copy length without checking that 4 ...

AZL-100728 CVE-2026-89526 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

CVE-2026-89526

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

DEBIAN-CVE-2026-89526

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

AZL-100467 CVE-2026-89444 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security buffer setattribute populates the security area of the BIOS attribute request buffer with the current admin password via populatesecuritybuffer, then dumps the whol...

EUVD-2026-76677

In the Linux kernel, the following vulnerability has been resolved: timers/itimer: Zero-init old itimerval before copy to userspace On native sparc64, struct kerneloldtimeval contains a four-byte hole after tvusec because tvsec is 64-bit while kernelsusecondst is 32-bit. putitimerval fills only t...

CVE-2026-89691

CVE-2026-89691 is an out-of-bounds read vulnerability in the Linux kernel's nfsd (Network File System Daemon) component. The nfsd4_release_compoundargs() function resets the args->ops pointer to the inline iops[8] array when the dynamically allocated buffer is freed, but fails to zero args-&gt...

CVE-2026-89642 cifs: call pagecache_isize_extended() in cifs_setsize() when extending

In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecacheisizeextended in cifssetsize when extending cifssetsize calls truncatepagecache but skips pagecacheisizeextended on extension. truncatesetsize shows the correct pattern: isizewriteinode, newsize; if newsize...