Exploit for Improper Authentication in Sonicwall Directory_Services_Connector

CVE-2020-5148 Forced Authentication in the SonicWall UTM SS...

Exploit for SQL Injection in Fortra Delivernow

CVE-2021-26837 SQL Injection in HelpSystems / Fortra Delive...

NullsecMultitools

nullsec A menu-driven offensive-security multitool — 37 mod...

Exploit for Use After Free in Arm Bifrost_Gpu_Kernel_Driver

Exploit for CVE-2022-38181 The write up can be found here...

EUVD-2025-210509

NLTK Natural Language Toolkit before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code. When collocations.py is invoked directly, the main block passes command-line...

PT-2026-64530

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Do not initialize SNP for ioctlSNP COMMIT Sashiko notes: if SEV initialization fails and KVM is actively running normal VMs, could a userspace process trigger this code path via /dev/sev ioctls e.g., SEV PDH GEN and...

Linux Distros Unpatched Vulnerability : CVE-2026-15037

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted...

PT-2026-64554

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the digi acceleport USB serial driver where the digi write inb command function fails to correctly handle timeouts. Instead of returning an error when a write URB USB...

Linux Distros Unpatched Vulnerability : CVE-2026-60122

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - gpsd through release-3.27.5, fixed at commit 4c06658, contains a code injection vulnerability in the gpsprof utility that allows an attacker who controls GPS...

openSUSE 16 Security Update : joe (openSUSE-SU-2026:21408-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21408-1 advisory. This update for joe fixes the following issue - CVE-2026-13412: improper validation in tag-file parser can lead to arbitrary command execution bsc126937...

Linux Distros Unpatched Vulnerability : CVE-2026-64448

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: restrict implied bcc0 exemption to responses without data area smb2checkmessage has a long-standing quirk that accepts a response whose calculated...

KLA91172 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Input can be exploited remotely to execute...

PT-2026-64476

Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection RCE via PDF render options. Options are passed directly to the wkhtmltopdf command without sanitization. Any web application that passes user-controlled options such as the page size, orientation or margins...

Linux Distros Unpatched Vulnerability : CVE-2026-64415

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/swap: add condresched in swapreclaimfullclusters to prevent softlockup We hit a real softlockup in an internal stress test environment. The workload was LTP...

PT-2026-64636

In the Linux kernel, the following vulnerability has been resolved: mm/swap: add cond resched in swap reclaim full clusters to prevent softlockup We hit a real softlockup in an internal stress test environment. The workload was LTP memory/swap stress on a large arm64 machine, with 320 CPUs, about...

PT-2026-64761

ImageMagick before 7.1.2-27 contains a memory leak vulnerability in the magick command-line interface when invalid options are provided. Attackers can trigger memory exhaustion by repeatedly supplying malformed command-line arguments to consume system resources...

False Prophets: On the Security of World Models in Agentic Systems

Large language models now power autonomous agents capable of complex, multi-step tasks in different environments. Accurate and reliable execution of these tasks requires the agent to predict the results of its actions. Recent research proposes to enhance predictive capabilities via specially...

Isolated but Exposed: Persistence-Based Memory Extraction Attack on LLM Agents

LLM-based agents extend large language models with long-term memory LTM that persists privacy-sensitive user data across sessions. Production systems mitigate extraction risks through memory isolation, binding each user's LTM to a unique identifier. This defense has blocked known attacks on share...

Linux Distros Unpatched Vulnerability : CVE-2026-13074

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An unauthenticated remote client can cause excessive CPU consumption on a MongoDB server by sending a specific combination of parameters to the awaitable hello...

Linux Distros Unpatched Vulnerability : CVE-2026-64624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.28.0 treats lines beginning with forward slash in RDP files as raw command-line options, exposing the entire CLI parser surface to untrusted...