Exploit for CVE-2026-111190

CVE-ARFORMS — ARForms exploitation toolkit Two exploit tools...

Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a valid account can...

CVE-2026-91007

The user-mode syscall verifiers for the charger driver API in drivers/charger/chargerhandlers.c did not inspect the prop argument before copying union chargerpropval across the user/kernel boundary. Two members of that union are function pointers — statusnotification CHARGERPROPSTATUSNOTIFICATION...

CVE-2026-19809

The user-mode system call verifier zvrfychargergetprop in drivers/charger/chargerhandlers.c declares an uninitialized union chargerpropval kval on the kernel privileged stack, passes it to the charger driver back end via zimplchargergetprop, and then copies the full sizeofunion chargerpropval bac...

K000164220: Linux Kernel vulnerability CVE-2026-31709

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: smb: client: validate the whole DACL before rewriting it in cifsacl buildsecdesc and idmodetocifsacl derive a DACL pointer from a server-supplied dacloffset and then use the incoming ACL to rebuild t...

CWP2SHELL

CWP2SHELL Control Web Panel HOST RCE LOOPBACK API ROOT =...

K000164219: Linux kernel vulnerability CVE-2026-31684

Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: net: sched: actcsum: validate nested VLAN headers tcfcsumact walks nested VLAN headers directly from skb-data when an skb still carries in-payload VLAN tags. The current code reads...

CVE-2026-19809 Kernel stack information disclosure in the charger_get_prop() system call handler

The user-mode system call verifier zvrfychargergetprop in drivers/charger/chargerhandlers.c declares an uninitialized union chargerpropval kval on the kernel privileged stack, passes it to the charger driver back end via zimplchargergetprop, and then copies the full sizeofunion chargerpropval bac...

EUVD-2026-124524

The user-mode system call verifier zvrfychargergetprop in drivers/charger/chargerhandlers.c declares an uninitialized union chargerpropval kval on the kernel privileged stack, passes it to the charger driver back end via zimplchargergetprop, and then copies the full sizeofunion chargerpropval bac...

CVE-2026-19809

A kernel stack information disclosure exists in the charger_get_prop() system call handler within the Zephyr RTOS (specifically in drivers/charger/charger_handlers.c). The vulnerability arises because an uninitialized union charger_propval is declared on the kernel stack, passed to a driver back ...

CVE-2026-91007

The Zephyr RTOS charger driver API contains a vulnerability where user-mode syscall verifiers in drivers/charger/charger_handlers.c failed to inspect the prop argument. This allowed the charger_set_prop() syscall to copy a union containing function pointers—specifically status_notification and on...

CVE-2026-91007 Arbitrary supervisor-mode function pointer injection via charger_set_prop() syscall in the charger driver API

The user-mode syscall verifiers for the charger driver API in drivers/charger/chargerhandlers.c did not inspect the prop argument before copying union chargerpropval across the user/kernel boundary. Two members of that union are function pointers — statusnotification CHARGERPROPSTATUSNOTIFICATION...

EUVD-2026-124523

The user-mode syscall verifiers for the charger driver API in drivers/charger/chargerhandlers.c did not inspect the prop argument before copying union chargerpropval across the user/kernel boundary. Two members of that union are function pointers — statusnotification CHARGERPROPSTATUSNOTIFICATION...

CVE-2026-116330

Untrusted data inclusion in PostgreSQL pgdump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 - Jenkins CLI unauthenticated arbitrary file re...

PSA: Critical Apache HTTP/2 Vulnerability: What WordPress Site Owners Should Know

Apache has released a fix for a critical vulnerability in the HTTP/2 module of Apache HTTP Server. The issue,CVE-2026-119618, can lead to remote code execution on affected servers. If your WordPress site is hosted on Apache, ask your host whether its Apache server accepts HTTP/2 and whether the f...

Moderate: Red Hat Security Advisory: rpm security update

An update for rpm is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

Important: Red Hat Security Advisory: gd security update

An update for gd is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

Important: Red Hat Security Advisory: crun security update

An update for crun is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

Security Bulletin: Vulnerabilities in libxml2 (CVE-2026-86140, CVE-2026-86141, CVE-2026-86143, CVE-2026-86144) affect AIX.

Summary Updated: Thu Nov 12 06:15:21 CST 2026. Update: Previous ifix had not included the old APAR fixes. Updated the ifixes and advisory. Vulnerabilities in libxml2 could cause stack-based buffer overflow CVE-2026-86140, A NULL pointer dereference CVE-2026-86141, An integer overflow...