SUSE CVE-2026-99081

In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...

SUSE CVE-2026-99092

In the Linux kernel, the following vulnerability has been resolved: riscv: patch: fix handling of bpf-jit execmem addresses Commit 8718e5a3090b "riscv: patch: skip fixmap mapping when kernel text is already writable" gated the corekerneltext branch of patchmap on CONFIGSTRICTKERNELRWX, and...

Important: Red Hat Security Advisory: bind security update

An update for bind is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

Important: Red Hat Security Advisory: .NET 9.0 security, bug fix, and enhancement update

An update for .NET 9.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: .NET 8.0 security, bug fix, and enhancement update

An update for .NET 8.0 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Exploit for CVE-2026-98432

한국어 CVE-2026-98432 temporary mitigation This...

Important: Red Hat Security Advisory: dogtag-pki security update

An update for dogtag-pki is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2026-115805

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

selenium-node-takeover-kit

Metasploit Exploits This project has moved. To get the latest version, pull from https://codeberg.org/JonStratton/selenium-node-takeover-kit This combines some of the examples below to upload files to, download files from, and execute code on a Selenium node via the “COMMANDTYPE” param. RCE...

CVE-2025-3085

A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificates in the peer's certificate chain. In cases of MONGODB-X509, which is not enabled by default, this may lead to...

CVE-2024-8207

In certain highly specific configurations of the host system and MongoDB server binary installation on Linux Operating Systems, it may be possible for a unintended actor with host-level access to cause the MongoDB Server binary to load unintended actor-controlled shared libraries when the server...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in postcss (CVE-2026-41305, CVE-2026-45623, CVE-2026-69153, CVE-2026-73646)

Summary Multiple vulnerabilities in the postcss package CVE-2026-41305, CVE-2026-45623, CVE-2026-69153, CVE-2026-73646 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 8.5.23 in FP-15 on both Linux and Windows operating systems. Vulnerability...

CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

CVE-2026-115805

The Rapid7 Insight Agent on Linux and macOS is vulnerable to local privilege escalation due to improper handling of local filesystem paths. Specifically, a vulnerability exists in the mcp.json configuration path where the Agent's inventory collection may process a crafted path, leading to shell i...

CVE-2026-115805 Rapid7 Insight Agent Local Privilege Escalation via Shell Injection in mcp.json Configuration Path

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

EUVD-2026-113221

Improper handling of local filesystem paths in Rapid7 Insight Agent on Linux and macOS may allow authenticated local users to gain elevated privileges. Exploitation requires existing local access and depends on the Agent's inventory collection processing the crafted path...

copyfail-dfir

CVE-2026-31431 Copy Fail: DFIR Investigation Walkthrough An interactive, step-by-step forensic investigation walkthrough for the Copy Fail Linux kernel vulnerability CVE-2026-31431. Click through an incident response scenario, from SIEM alert to confirmed verdict, with the commands an analyst wou...

CVE-2026-31431-Patch

CVE-2026-31431 Copy Fail Mitigation & Patch Script Image Before Patch and Vulnerable Image After Patch With Script This repository contains a specialized bash script designed to mitigate and patch CVE-2026-31431 , also known as "Copy Fail". This vulnerability is a critical Local Privilege...

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux RHEL, and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. Anthropic said on October 27 that its AI model wrote an exploit that uses the flaw to...

gstreamer:gst-discoverer: Heap-use-after-free in parse_stream_topology

Project: https://anongit.freedesktop.org/git/gstreamer/gstreamer https://gitlab.freedesktop.org/gstreamer/gstreamer.git Detailed Report: https://oss-fuzz.com/testcase?key=4764783547842560 Project: gstreamer Fuzzing Engine: libFuzzer Fuzz Target: gst-discoverer Job Type: libfuzzerasangstreamer...