Amazon Linux 2023 : dracut, dracut-caps, dracut-config-generic (ALAS2023-2026-2085)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2085 advisory. A flaw was found in dracut. The die error-handling function writes its message into a shell script under the initramfs emergency-hook directory without properly shell-quoting it. When the message...

Linux Distros Unpatched Vulnerability : CVE-2026-82853

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Nodemailer versions before 8.0.5 contain an SMTP command injection vulnerability in the transport name option used in EHLO/HELO commands. The name parameter is...

Important: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: afunix: Drop all SCM attributes for SOCKMAP. CVE-2026-53005 In the Linux kernel, the following vulnerability has been resolved: bpf: Reject BPFMAPTYPEINODESTORAGE creation if BPF LSM is uninitialized When...

Important: postgresql17

Issue Overview: Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the...

Amazon Linux 2 : vim, --advisory ALAS2-2026-3883 (ALAS-2026-3883)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3883 advisory. Vim is an open source, command line text editor. Prior to version 9.2.0565, the updatesnapshot function in src/terminal.c copies the visible terminal screen into the scrollback buffer when a...

Linux Distros Unpatched Vulnerability : CVE-2026-77650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The append-only-vec crate 0.1.9 for Rust can trigger execution of malicious code when compiling a project that uses the crate, because it has a rogue dependency...

Amazon Linux 2023 : postgresql17, postgresql17-contrib, postgresql17-llvmjit (ALAS2023-2026-2076)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2076 advisory. Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via craft...

Amazon Linux 2023 : bpftool6.12, kernel6.12, kernel6.12-devel (ALAS2023-2026-2110)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2110 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcounter: serialize reset with spinlock CVE-2026-45897 In the Linux kernel, the following vulnerability has bee...

RHEL 10 : nodejs-nodemon (RHSA-2026:61374)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:61374 advisory. Simple monitor script for use during development of a node.js app. For use during development of a node.js based application. nodemon will watch th...

Security update for postgresql15 (important)

openSUSE security update: security update for postgresql15 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21700-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

Security update for postgresql14 (important)

openSUSE security update: security update for postgresql14 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21699-1 Rating: important References: bsc1275001 bsc1275002 bsc1275042 bsc1275043 bsc1275044 bsc1275046 bsc1275047 bsc1275048 bsc1275049...

SUSE SLED15 / SLES15 Security Update : go1.25-openssl (SUSE-SU-2026:3815-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3815-1 advisory. Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged...

SUSE SLED15 / SLES15 Security Update : go1.27 (SUSE-SU-2026:3830-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3830-1 advisory. - go1.27.0 released 2026-08-19 is a major release of Go. go1.27.x minor releases will be provided through Augu...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82595 D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injection

A vulnerability was found in D-Link DIR-825M 1.1.8. Affected by this vulnerability is the function sub456CF4 of the file /boafrm/formSysCmd of the component System Command Execution. Performing a manipulation of the argument sysCmd results in command injection. It is possible to initiate the atta...

CVE-2026-82595

CVE-2026-82595 is a command injection vulnerability in D-Link DIR-825M firmware version 1.1.8 , located in the System Command Execution component (file /boafrm/formSysCmd, function sub_456CF4). Manipulating the sysCmd argument allows an authenticated remote attacker to inject and execute arbitrar...

zen-desktop v0.25.1

Zen: Your Comprehensive Ad-Blocker and Privacy Guard There is, simply, no way, to ignore privacy. Because a citizenry’s freedoms are interdependent, to surrender your own privacy is really to surrender everyone’s. Edward Snowden, Permanent Record Website • Mastodon • Bluesky • Discord •...

Exploit for CVE-2025-66478

CVE-2025-66478 / CVE-2025-55182 "React2Shell" — RSC Server A...

onecli v2.0.1

The agent harness built for teams. A pro assistant for companies. Give every employee a secured, sandboxed personal agent. Website · Docs · Discord Quick Start Cloud-hosted: onecli.sh Self-hosted root@kitploit: git clone https://github.com/onecli/onecli.git && cd onecli pnpm install pnpm run setu...

moltis v20260818.08

Moltis — A secure persistent personal agent server in Rust One binary — sandboxed, secure, yours. Installation • Comparison • Architecture • Security • Features • How It Works • Contributing Moltis recently hit the front page of Hacker News. Please open an issue for any friction at all. I'm focus...