300362 matches found
MiracleLinux 9 : gpsd-minimal-3.26.1-2.el9_8.1 (AXSA:2026-1609:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1609:02 advisory. gpsd: gpsd: Command Injection via GPS device subtype allows arbitrary code execution CVE-2026-58459 Tenable has extracted the preceding description block...
SUSE SLED15 / SLES15 Security Update : rsync (SUSE-SU-2026:3657-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3657-1 advisory. - CVE-2026-53783: rrsync restricted-directory escape validation-vs-exec race + unsafe option allowlist...
PT-2026-79532
A weakness has been identified in TRENDnet TEW-823DRU 1.1.02b01. This vulnerability affects the function nvram get of the component CLI Configuration Tool. This manipulation causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the...
Linux Distros Unpatched Vulnerability : CVE-2026-54552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sh provides Python process launching. Prior to 2.2.4, the uid option in sh.py performs an incomplete privilege drop on Linux and Unix-like systems. When sh runs...
VulnCheck KEV: CVE-2026-57739
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in AcyMailing Newsletter Team AcyMailing SMTP Newsletter acymailing allows Blind SQL Injection.This issue affects AcyMailing SMTP Newsletter: from n/a through = 10.11.0...
PT-2026-79717
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5: Fix buffer length in create direct keys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmd exec+0x550/0xca0 mlx5 core Read of size 272 at addr 0000000176795020 by task...
PT-2026-79707
In the Linux kernel, the following vulnerability has been resolved: vhost-scsi: reject feature changes after endpoint vhost scsi setup vq cmds runs from VHOST SCSI SET ENDPOINT and allocates each command's protection scatterlist array prot sgl according to the acknowledged VIRTIO SCSI F T10 PI bi...
Security update for apptainer (important)
openSUSE security update: security update for apptainer ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21611-1 Rating: important References: bsc1275248 Cross-References: CVE-2026-17106 CVSS scores: CVE-2026-17106 SUSE : 7.1...
Security update for chromium (critical)
openSUSE security update: security update for chromium ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21609-1 Rating: critical References: bsc1275706 Cross-References: CVE-2026-76033 CVE-2026-76034 CVE-2026-76035 CVE-2026-76036 CVE-2026-76037...
Linux Distros Unpatched Vulnerability : CVE-2026-74712
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vdpa/mlx5: Fix buffer length in createdirectkeys We have seen in our CI the following KASAN message: BUG: KASAN: slab-out-of-bounds in cmdexec+0x550/0xca0...
PT-2026-79529
Name of the Vulnerable Software and Affected Versions TRENDnet TEW-821DAP version 2.2.01b05 Description A stack-based buffer overflow exists in the NTP Timezone Configuration Handler within the uci safe get function of the /cgi-bin/apply time.cgi endpoint. This issue occurs because the function...
Linux Distros Unpatched Vulnerability : CVE-2026-74702
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vhost-scsi: reject feature changes after endpoint vhostscsisetupvqcmds runs from VHOSTSCSISETENDPOINT and allocates each command's protection scatterlist array...
VulnCheck KEV: CVE-2021-27691
Command Injection in Tenda G0 routers with firmware versions v15.11.0.69039CN and v15.11.0.55876CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.179502CN or v15.11.0.169024CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This...
Linux Distros Unpatched Vulnerability : CVE-2026-74655
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted ...
Linux Distros Unpatched Vulnerability : CVE-2026-68766
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hashcat fails to restrict command-line options when parsing restore files, allowing attackers to inject output-redirecting options like --outfile and...
PT-2026-79699
In the Linux kernel, the following vulnerability has been resolved: net/ncsi: fix heap OOB read in NCSI CMD SEND CMD payload length ncsi send cmd nl takes the number of bytes to copy from the attacker-controlled ncsi pkt hdr.length field of the in-band packet header, while the source buffer is th...
PT-2026-79660
In the Linux kernel, the following vulnerability has been resolved: serial: qcom-geni: fix TX DMA buffer flush When transmit flushing a qcom-geni UART during an ongoing TX DMA, the UART gets stuck infinitely repeating corrupted TX DMA frames. The DMA-mode uart ops does not provide a flush buffer...
Linux Distros Unpatched Vulnerability : CVE-2026-74694
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/ncsi: fix heap OOB read in NCSICMDSENDCMD payload length ncsisendcmdnl takes the number of bytes to copy from the attacker-controlled ncsipkthdr.length fiel...
gopher47
gopher47 Havoc Framework के लिए एक तृतीय-पक्ष गोफर असैसिन यह वीडियोगेम जैसा है :D यह क्या है? 🤔 यह Golang में लिखा गया Havoc C2 के लिए एक तृतीय-पक्ष एजेंट है, जिसे मुख्य रूप से एक सीखने के प्रोजेक्ट के रूप में लिखा गया है, लेकिन मुझे यकीन है कि यह अभी भी उपयोगी है। इसके रिलीज़ होने तक, आप मेरे...