W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure

The W3 Total Cache WordPress plugin through version 2.9.3 skips its entire output buffering and processing pipeline whenever an incoming request's User-Agent header contains the string "W3 Total Cache", without authenticating the caller. On sites that use developer-placed dynamic fragment tags, t...

Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Broken-Vulnerable-Code-Snippets

Vulnerable-Code-Snippets A collection of vulnerable code snippets taken form around the internet. Snippets taken from various blog posts, books, resources etc. No Copyright Infringement Intended Note: This is not a good benchmark for testing static analysis tools, they are broken code snippets,...

DirtyFrag-for-dummies

Dirty Frag / CVE-2026-43284 — Research Notes Overview This repository contains a cleaned-up technical diagram and supporting notes for the Linux kernel vulnerability commonly referred to as Dirty Frag and tracked for the xfrm-ESP path as CVE-2026-43284. The issue belongs to the broader Dirty Frag...

CVE-2026-79752

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-79752 Write-up: https://abraxaslabs.tech/research/CVE-2026-79752 CVE-2026-79752 CakePHP 5.2.13 - cakephp I am @abraxasnull. Loopback lab. The client is CVE-2026-79752-Abraxas-Labs.py. CAST AS literal...

Dirty-Frag

💥 CVE-2026-43284 — Dirty Frag 💥 ⚡ Dirty Frag Local Privilege Escalation Proof of Concept ⚡ 📖 Description This repository contains a Proof of Concept PoC for: CVE-2026-43284 — Dirty Frag The exploit demonstrates a vulnerability affecting vulnerable Linux systems. 🧠 About Dirty Frag Dirty Frag...

PoC-Exploit-CVE-2024-20467

Exploit for Cisco IOS XE CVE-2024-20467 Vulnerability Overview This exploit targets a vulnerability in the IPv4 fragment assembly code found in Cisco IOS XE Software. The vulnerability allows an unauthenticated remote attacker to cause a denial of service DoS condition on vulnerable devices...

CLEANSTART-2026-DI06690 Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events (SSE) with view fragments

Security vulnerability affects the apache-hive package. Spring MVC and WebFlux applications are vulnerable to stream corruption when using Server-Sent Events SSE with view fragments...

CVE-2026-119196

A flaw was found in pyasn1. A remote attacker can cause a Denial of Service DoS by sending specially crafted Abstract Syntax Notation One ASN.1 data containing multiple constructed bit string fragments. When decoding these fragments, the library repeatedly copies and shifts accumulated bit data,...

SUSE CVE-2026-75507

GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specifiedrules repeatedly compares fields that share response names and recursively re-compares flattened inline fragments during the validation...

SUSE CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

AZL-111119 CVE-2026-99088 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

DEBIAN-CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

UBUNTU-CVE-2026-99088

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

CVE-2026-99088

A vulnerability exists in the Linux kernel 's OpenvSwitch component specifically within the set_ipv6_addr() function. When processing IPv6 fragments , parse_ipv6hdr() sets the protocol to NEXTHDR_FRAGMENT without calling skb_set_transport_header(). Consequently, update_ipv6_checksum() uncondition...

EUVD-2026-109894

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

CVE-2026-99088 net: openvswitch: validate transport header presence in set_ipv6_addr

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

CVE-2026-99088 net: openvswitch: validate transport header presence in set_ipv6_addr

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in setipv6addr When executing IPv6 address rewrite actions on IPv6 fragments, setipv6addr calls updateipv6checksum. If parseipv6hdr processes a non-first IPv6 fragment, it sets...

PT-2026-123375

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: validate transport header presence in set ipv6 addr When executing IPv6 address rewrite actions on IPv6 fragments, set ipv6 addr calls update ipv6 checksum. If parse ipv6hdr processes a non-first IPv6 fragment, ...