CVE-2026-23761

VB-Audio Voicemeeter, Voicemeeter Banana, and Voicemeeter Potato versions ending in 1.1.1.9, 2.1.1.9, and 3.1.1.9 and earlier, respectively, as well as VB-Audio Matrix and Matrix Coconut versions ending in 1.0.2.2 and 2.0.2.2 and earlier, respectively, contain a vulnerability in their virtual aud...

GHSA-66FC-RW6M-C2Q6

creationtimestamp| type| source ---|---|--- 2026-01-22 03:17:23+00:00| seen| Telegram/tTY91DEWO-ryf2bgI1Zbqu1pP6WWF8wdw0as9TjL7seY8JU...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22043)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22043 advisory. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: add bounds check for durable hand...

PT-2026-3919

Name of the Vulnerable Software and Affected Versions LA-Studio Element Kit for Elementor versions through 1.5.6.3 Description The LA-Studio Element Kit for Elementor plugin for WordPress is susceptible to unauthorized administrative user creation. This occurs because the ajax register handle...

Azure Linux 3.0 Security Update: kernel (CVE-2024-57916)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-57916 advisory. - In the Linux kernel, the following vulnerability has been resolved: misc: microchip: pci1xxxx: Resolve kerne...

MiracleLinux 8 : librabbitmq-0.9.0-2.el8 (AXSA:2021-1184:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2021-1184:01 advisory. librabbitmq: integer overflow in amqphandleinput in amqpconnection.c leads to heap-based buffer overflow CVE-2019-18609 Tenable has extracted the preceding...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-20805-PoC The PoC of information disclosure in Micros...

CVE-2025-15539

A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwcs11handledownlinkdatanotificationack of the file src/sgwc/s11-handler.c of the component sgwc. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15529 Open5GS s5c-handler.c sgwc_s5c_handle_create_session_response denial of service

A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public a...

CVE-2025-15529

Open5GS up to 2.7.6 is affected. The vulnerability lies in the sgwc_s5c_handle_create_session_response function in src/sgwc/s5c-handler.c; manipulation can cause a denial of service. Remote exploitation is possible and the exploit has been publicly released. A patch exists named b19cf6a2dbf5d3081...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004366)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004366 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/panfrost: Fix GEM handle creation ref-counting panfrostgemcreatewithhandle previously returne...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001483)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001483 advisory. In grehandleoffloads of ipgre.c, there is a possible page fault due to an invalid memory access. This could lead to local information disclosure with no additional...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001107)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001107 advisory. Race condition in the fsnotify implementation in the Linux kernel through 4.12.4 allows local users to gain privileges or cause a denial of service memory corruption...

CVE-2025-14880

The Netcash WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlereturnurl function in all versions up to, and including, 4.1.3. This makes it possible for unauthenticated attackers to mark any WooCommer...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002378)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002378 advisory. Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service memory corruption or possibly...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002567)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002567 advisory. The handleinvept function in arch/x86/kvm/vmx.c in the Linux kernel 3.12 through 3.15 allows privileged KVM guest OS users to cause a denial of service NULL pointer...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001845)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001845 advisory. Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service memory corruption or possibly...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002764)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002764 advisory. The vmwgbsurfacedefineioctl function accessible via DRMIOCTLVMWGBSURFACECREATE in drivers/gpu/drm/vmwgfx/vmwgfxsurface.c in the Linux kernel through 4.11.4 defines a...

CVE-2025-14880

The Netcash WooCommerce Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlereturnurl function in all versions up to, and including, 4.1.3. This makes it possible for unauthenticated attackers to mark any WooCommer...

CVE-2025-14880

CVE-2025-14880 concerns the Netcash WooCommerce Payment Gateway plugin for WordPress. The vulnerability arises from a missing capability check in the handle_return_url function, present in all versions up to and including 4.1.3, enabling unauthenticated attackers to modify data and mark WooCommer...