14044 matches found
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ALSA: usb-audio: fixed a stack information leak in RME Digiface status sndrmedigifacereadstatus reads a four-word status block from the device into an uninitialized on-stack le32 buffer buf4. Whenever the vendor control-IN...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: netdev-genl: The report NAPI thread PID in the caller’s pid namespace function now correctly reports the NAPI kthread PID in the NETDEVANAPIPID using taskpidnr, which returns the PID from the caller’s pid namespace. The...
CVE-2026-76172
creationtimestamp| type| source ---|---|--- 2026-08-24 10:11:24+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mtt2uomns22b 2026-09-02 19:33:12+00:00| seen| https://gist.github.com/alon710/af575107e879f298d568b88dd8bac4cb...
CVE-2026-74712
A flaw was found in the Linux kernel's vdpa/mlx5 driver. This vulnerability occurs due to an incorrect calculation of buffer length within the createdirectkeys function, causing the system to read beyond its allocated memory boundaries. A local attacker could exploit this memory corruption to...
CVE-2026-66897
creationtimestamp| type| source ---|---|--- 2026-08-24 09:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtszokro2q2f 2026-08-24 10:30:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150018844317018 2026-08-24 10:30:29+00:00| seen|...
CVE-2026-68959
creationtimestamp| type| source ---|---|--- 2026-08-24 08:45:31+00:00| seen| https://jvn.jp/en/jp/JVN33423625 2026-08-25 09:48:02+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtvjzt2arz2z 2026-09-24 22:24:10+00:00| seen|...
CVE-2026-78255
creationtimestamp| type| source ---|---|--- 2026-08-24 08:31:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hy4p6mf2rxbjw...
CVE-2026-78202
creationtimestamp| type| source ---|---|--- 2026-08-24 08:29:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/2kdunt7esf746 2026-08-24 10:01:49+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mtt2dlmjhv2i...
CVE-2026-78201
creationtimestamp| type| source ---|---|--- 2026-08-24 08:11:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/7c22yiug4wv4q...
CVE-2025-44810
creationtimestamp| type| source ---|---|--- 2026-08-24 08:00:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99427 2026-08-24 21:00:05+00:00| seen| Telegram/0Lzh2WjQOWsuTydOWekHZzZKDiwWQ3jcpMbWJHlr9UUA 2026-08-25 00:00:08+00:00| published-proof-of-concept|...
CVE-2026-74884
creationtimestamp| type| source ---|---|--- 2026-08-24 07:31:31+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mtsrwtbp6o2j...
Malicious Package
Overview twork-data-services-aggregator-sme-task-info is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
CVE-2026-78211
creationtimestamp| type| source ---|---|--- 2026-08-24 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtsjzuowpg2f 2026-08-24 08:15:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-78211...
Security update for Multi-Linux Manager Client Tools - Monitoring stack
This update fixes the following issues: golang-github-prometheus-alertmanager: CVE-2026-39821: Fix validation bypass and privilege escalation by updating golang.org/x/net to version 0.55.0 bsc1266615 golang-github-prometheus-prometheus updated from version 3.5.3 to 3.5.4: Security fixes:...
The vulnerability of the thermal_of.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the thermalof.c component in the Linux operating system’s kernel is related to the failure to release resources after their useful lifespan has ended. Exploiting this vulnerability can allow an attacker to cause service failures...
The vulnerability of the process_message_header() function in the net/ceph/messenger_v2.c module of the Linux kernel allows a hacker to gain access to protected information or cause a service failure.
The vulnerability of the processmessageheader function in the net/ceph/messengerv2.c module of the Linux kernel involves reading data beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or cause service failures...
PT-2026-80806
Unauthenticated Cross Site Scripting XSS in WPComplete = 2.9.5.6 versions...
CVE-2026-10618: Improper Neutralization of Input During Web Page Generation
Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...
PT-2026-80796
Hugo's default fenced-code-block renderer writes attribute values taken from the code-fence info string into the rendered HTML without escaping them. New in markup/internal/attributes/attributes.go converts every attribute value from a byte slice to a string as it is stored, deliberately dropping...