Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-004094)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-004094 advisory. In uvcscanchainforward of uvcdriver.c, there is a possible linked list corruption due to an unusual root cause. This could lead to local escalation of privilege in t...

CVE-2026-23575

creationtimestamp| type| source ---|---|--- 2026-01-15 07:50:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mch3xlb37g2c...

PT-2026-43800

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF verifier where the sync linked regs function incorrectly copies the ID of a known register to another register when propagating bounds. Specifically, if a...

New China Linked VoidLink Linux Malware Targets Major Cloud Providers

Researchers have discovered VoidLink, a sophisticated new Linux malware framework designed to infiltrate AWS, Google Cloud, and Azure. Learn how this Chinese-affiliated toolkit uses adaptive stealth to stay hidden...

CVE-2025-14880

creationtimestamp| type| source ---|---|--- 2026-01-14 07:33:51+00:00| seen| https://gist.github.com/Darkcrai86/3cf87130e39d81eecc29c38770fa8308 2026-01-14 08:06:58+00:00| seen| https://gist.github.com/Darkcrai86/b699c34f24359e7696cb78359669ab59...

CVE-2025-12050

creationtimestamp| type| source ---|---|--- 2026-01-14 01:38:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcdwplobtz2y 2026-01-14 05:38:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcee4elved2u 2026-01-14 05:38:59+00:00| seen|...

curl: Use-After-Free in curl_easy_nextheader when reusing header handle across requests

. The API returns struct curlheader objects that internally reference libcurl-owned linked list nodes. When a new request is performed on the same CURL handle, libcurl frees and rebuilds the internal header list, but previously returned struct curlheader objects remain valid to the application an...

CVE-2026-0513

creationtimestamp| type| source ---|---|--- 2026-01-13 06:31:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcbwmodeci2x 2026-01-13 06:48:14+00:00| seen| https://vulnerability.circl.lu/bundle/79cf05e4-8e7e-4859-b145-d69bffb52412 2026-01-13 07:58:20+00:00| seen|...

CVE-2026-22784

creationtimestamp| type| source ---|---|--- 2026-01-12 21:51:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcazkhbxyh2o...

CVE-2023-49820

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Gordon Böhme, Antonio Leutsch Structured Content JSON-LD wpsc allows Stored XSS.This issue affects Structured Content JSON-LD wpsc: from n/a through 1.5.3...

CVE-2024-34029

Mattermost versions 9.5.x = 9.5.3, 9.7.x = 9.7.1 and 8.1.x = 8.1.12 fail to perform a proper authorization check in the /api/v4/groups//channels//link endpoint which allows a user to learn the members of an AD/LDAP group that is linked to a team by adding the group to a channel, even if the user...

CVE-2025-15057

creationtimestamp| type| source ---|---|--- 2026-01-09 08:03:00+00:00| seen| Telegram/baYAHbqMqSalDW7Jh5vLcnZYQr2csVL8CwQNknT-bM3nPo8 2026-01-09 08:41:55+00:00| seen| https://gist.github.com/Darkcrai86/3514d22fb35676a07c991248d6731f3a...

China-Linked UAT-7290 Targets Telecoms with Linux Malware and ORB Nodes

A China-nexus threat actor known as UAT-7290 has been attributed to espionage-focused intrusions against entities in South Asia and Southeastern Europe. The activity cluster, which has been active since at least 2022, primarily focuses on extensive technical reconnaissance of target organizations...

RHSA-2026:0074

creationtimestamp| type| source ---|---|--- 2026-01-07 08:07:26+00:00| seen| https://gist.github.com/Darkcrai86/68c063b61124676f24152a465f2a20ca...

MAL-2026-39 Malicious code in spire.officejs-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d5bc6046960bccab3120bb794cc2c868fa2bb41e0d35028f39e2e9ca9033a80 The package spire.officejs-common was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-48768

creationtimestamp| type| source ---|---|--- 2025-12-31 19:18:53+00:00| seen| https://seclists.org/oss-sec/2025/q4/355 2025-12-31 20:45:14+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mbcqatc2xd2w 2026-01-01 18:54:25+00:00| seen|...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

EUVD-2025-205608

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...

CVE-2025-15195

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...