EUVD-2026-86035

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT events are emitted with pid=0 while carrying another process's PID and...

CVE-2026-93275

The Linux kernel contains a vulnerability in the perf/x86/intel/pt component where calls to pt_event_stop() without the PERF_EF_UPDATE flag fail to call perf_aux_output_end(). This causes a subsequent pt_event_start() to call perf_aux_output_begin() again, violating nesting rules and triggering a...

CVE-2026-93275 perf/x86/intel/pt: Fix stop/start with no update

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pteventstop is called without PERFEFUPDATE flag, then perfauxoutputend is not called. A subsequent call to pteventstart will call perfauxoutputbegin again which violates the rul...

EUVD-2026-86147

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pteventstop is called without PERFEFUPDATE flag, then perfauxoutputend is not called. A subsequent call to pteventstart will call perfauxoutputbegin again which violates the rul...

CVE-2026-93275 perf/x86/intel/pt: Fix stop/start with no update

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pteventstop is called without PERFEFUPDATE flag, then perfauxoutputend is not called. A subsequent call to pteventstart will call perfauxoutputbegin again which violates the rul...

CVE-2026-25512

CVE-2026-25512: Remote Code Execution via Command Injection in TNEF Handler - Group-Office CVSS 4.0 Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H Table of Contents Summary Affected Versions Technical Details Root Cause Source to Sink Flow Exploitation Automated Exploit...

voron-crypto

Biblioteca de criptografía/protocolo Voron — solicitud de revisión Este es el núcleo criptográfico y de protocolo de mensajería de un pequeño proyecto de mensajería E2EE, extraído por separado para su revisión externa. No es el producto completo: el cliente Android y la configuración de despliegu...

CVE-2025-56514

CVE-2025-56514: Vulnerabilidad de Cross Site Scripting XSS en la aplicación de chat Fiora Descripción general Una vulnerabilidad de Cross Site Scripting XSS, identificada como CVE-2025-56514 , afecta a la aplicación de chat Fiora versión 1.0.0. Esta vulnerabilidad permite a un usuario autenticado...

Dirty-COW-CVE-2016-5195-

Dirtyc0w Docker POC Requisitos previos: Vagrant instalado Cómo usar Primero clona el proyecto git clone https://github.com/BrolyCode/Dirty-Cow.git Entra en la carpeta cd Dirty-Cow Luego levanta el entorno con el comando vagrant up Una vez que el servidor esté construido, nos conectaremos por ssh...

CVE-2026-57590

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

CVE-2026-57590

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler (versions before 3.4.3 ). The root cause is that the affected APIs fail to verify if an authenticated user has the necessary permissions to access the project associated with the target Task Group. This...

CVE-2026-57590 Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

EUVD-2026-85825

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

CVE-2026-94609: Improper Privilege Management

authentik is an open-source identity provider. Prior to 2026.2.7, 2026.5.7, and 2026.8.2, an account with delegated permission to manage a group, group membership, or a user can grant superuser status to an account or assign an existing role to a group without holding the permissions that gate...

CVE-2026-93275: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fix stop/start with no update If pteventstop is called without PERFEFUPDATE flag, then perfauxoutputend is not called. A subsequent call to pteventstart will call perfauxoutputbegin again which violates the rul...

CVE-2026-57590: Incorrect Authorization

A missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler. The affected APIs do not properly verify whether the authenticated user has permission to access the project associated with the target Task Group. This issue affects Apache DolphinScheduler: before...

CVE-2026-97311: Missing Authorization

A flaw was found in the Admin REST API of Keycloak, an identity and access management solution. The endpoints used to retrieve groups associated with a specific role do not properly check for individual group visibility permissions. This allows a delegated administrator with basic search privileg...

Linux Distros Unpatched Vulnerability : CVE-2026-97422

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/amdkfd: fix SMI event cross-process information leak kfdsmievenabled skips the suser privilege check when pid=0. PROCESSSTART, PROCESSEND, and VMFAULT event...

UBUNTU-CVE-2026-78253

Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...

CVE-2026-78253

Uncontrolled recursion in QXmlStreamReader::readElementText in Qt Group Qt allows attackers to cause a denial of service application crash via stack exhaustion via a crafted XML document...