CVE-2024-37742

CVE-2024-37742: Exploit degli Appunti in SEB ≤ 3.5.0 Windows Questo repository contiene una proof-of-concept PoC per sfruttare CVE-2024-37742, una vulnerabilità in Safe Exam Browser SEB ≤ 3.5.0 su Windows. La vulnerabilità consente a un utente malintenzionato di condividere i dati degli appunti t...

CVE-2026-7574

🚨 CVE-2026-7574 — Claude Desktop Cowork VM-Integritätsumgehung Anthropic Claude Desktop Cowork VM-Image-Integritätsumgehung 🔥 Lokale Persistenz durch VM-Image-Manipulation Eine Integritätsprüfungs-Schwachstelle, die die Änderung des Claude Desktop Cowork VM-Dateisystem-Images rootfs.img erlaubt u...

gaia

Gaia: Global API Integrity Assessor Dipendenze Installa opam per compilare le API di test. Installa git, python3, pip e .NET per compilare RESTler e Schemathesis. Installa cargo per compilare Gaia. Installa docker v26.0.1 e docker compose v2.26.1 per compilare Gaia con ELK Stack opzionale se non...

kernel: netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry

A flaw was found in the Linux kernel's netfilter component, specifically within the nftsetpipapoavx2 AVX2 matching functions. This vulnerability occurs when a pipapo set with an 'ipv4 . port' key is reloaded. Due to incorrect masking, the system may erroneously identify non-matching elements as...

fim-ebpf

FIM-eBPF: eBPF के साथ फ़ाइल अखंडता निगरानी Linux पर फ़ाइल निर्माण और संशोधन घटनाओं की निगरानी के लिए एक हल्का eBPF प्रोग्राम। यह उपकरण कर्नेल से सीधे फ़ाइल संचालन का पता लगाने के लिए eBPF एक्सटेंडेड बर्कले पैकेट फ़िल्टर का उपयोग करता है, जो न्यूनतम ओवरहेड के साथ उच्च प्रदर्शन निगरानी प्रदान करता...

golang security update

An update is available for golang. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

golang security update

An update is available for golang. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The golang packages provide the Go programming language compiler. Security...

RLSA-2026:22112 Important: go-toolset:rhel8 security update

Go Toolset provides the Go programming language tools and libraries. Go is alternatively known as golang. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass due to checksum...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-093249)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093249 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 5.7.31 and prior. Easily exploitable...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: fwupd (UTSA-2026-054034)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054034 advisory. A PGP signature bypass flaw was found in fwupd all versions, which could lead to the installation of unsigned firmware. As per upstream, a signature bypass is...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-098954)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-098954 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: abort transaction on unexpected eb generation at btrfscopyroot If we find an unexpected...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061550)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061550 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 5.7.36 and prior and 8.0....

RockyLinux 8 : go-toolset:rhel8 (RLSA-2026:22112)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22112 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

RockyLinux 10 : golang (RLSA-2026:22120)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:22120 advisory. net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 cmd/go: golang: Go command cmd/go: Integrity bypass...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mysql5 (UTSA-2026-061543)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-061543 advisory. Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Replication. Supported versions that are affected are 5.7.34 and prior and 8.0.25 and...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65097

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

EUVD-2026-66094

NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without integrity check. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering...

CVE-2026-65097

NVIDIA NemoClaw for Linux is affected by a vulnerability in its installation scripts , where an attacker could cause a download of code without integrity check . A successful exploit could lead to code execution , escalation of privileges , information disclosure , and data tampering . The CVSS 3...

CVE-2026-55419

Reachy Mini is an SDK for controlling Reachy Mini robots. Prior to 1.8.2, the Reachy Mini daemon exposes the /api/media/sounds/upload endpoint implemented by the uploadsound method in src/reachymini/daemon/app/routers/media.py without authentication, file-extension checks, content validation, or...