CVE-2026-47552

A flaw was found in nvidia-driver. An unprivileged local user can bypass an authorization check in the kernel mode layer to modify privileged configurations. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code, access sensitive information, or cause a...

CVE-2026-47563

A flaw was found in xorg-x11-drv-nvidia. A local user can trigger an invalid memory access NULL pointer dereference in the driver's kernel mode layer. A successful exploit could allow an attacker to execute arbitrary code with elevated system privileges, access sensitive information, or cause a...

Malicious code in @kelvdra/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

MAL-2026-17351 Malicious code in @bottino/baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

CVE-2026-22008-AWS-Lambda-Layer-Injection-via-Shared-Layer-ARN

CVE-2026-22008 – 通过共享 Layer ARN 的 AWS Lambda Layer 注入 程序代码 Python deployvulnerablelambda.py - Lambda function using a layer from untrusted account import boto3 lambdaclient = boto3.client'lambda' Attacker publishes a public layer containing malicious code Victim function references the layer ARN...

webcgi-exploits

Web CGI Exploits 这是我前几年写的和Web CGI相关的各种exp的集合。 原理 通常情况下，web的应用架构是这样分层的: 1. web应用程序 2. web框架 3. 脚本语言解释器 4. web容器服务器 5. web前端反向代理通常是nginx等等. 4 & 5 有可能是同一个东西，甚至有些时候3 & 4也可能是同一个东西。...

goIssue_dunfell

OpenEmbedded-Core OpenEmbedded-Core 是一个层，包含当前版本 OpenEmbedded 的核心元数据。它是无发行版式的（可以通过设置 DISTRO = "nodistro" 构建功能性镜像），并且仅包含模拟机器支持。 有关 OpenEmbedded 的信息，请参阅 OpenEmbedded 网站： https://www.openembedded.org/ Yocto 项目提供了关于 OE 的广泛文档，包括参考手册，可在以下位置找到： https://docs.yoctoproject.org/ 贡献 请参考...

BIT-MONGODB-2026-89099 Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption

A race condition in the document value layer of MongoDB Server can allow concurrent server threads to operate on the same internal memory without synchronization, leading to memory corruption. An authenticated user holding ordinary read-write privileges on a database may be able to trigger this...

CLEANSTART-2026-OK73778 SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass

Security vulnerability affects the kube-state-metrics-fips package. SWIG file names containing 'cgo' and well-crafted payloads could lead to code smuggling and arbitrary code execution at build time due to trust layer bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-47543

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A...

Linux Distros Unpatched Vulnerability : CVE-2026-47553

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an unprivileged user could cause an out-of-bounds write....

Linux Distros Unpatched Vulnerability : CVE-2026-47500

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts during error paths...

Linux Distros Unpatched Vulnerability : CVE-2026-47505

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free. A successful exploit of...

Linux Distros Unpatched Vulnerability : CVE-2026-47542

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A...

Linux Distros Unpatched Vulnerability : CVE-2026-47532

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds write. A...

Protocol Integration of Physical Layer Deception into EAP-TEAP Wi-Fi Authentication

Credential-based Extensible Authentication Protocol EAP authentication cannot distinguish a legitimate credential holder from an adversary using compromised credentials. Physical Layer Deception PLD complements credential-based authentication by exposing a deceptive primary object over a primary...

Linux Distros Unpatched Vulnerability : CVE-2026-47512

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds read leading to...

AlmaLinux 9.6 [TuxCare] Security Update: 389-ds-base / 389-ds-base-devel / 389-ds-base-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1783596522)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1783596522 advisory. - A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Server 389-ds-base. After a successful SASL bind with...

Linux Distros Unpatched Vulnerability : CVE-2026-47508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect conversion between...

Linux Distros Unpatched Vulnerability : CVE-2026-47522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause improper input validation. A...