SPIP Autosave Session Unauthenticated RCE

This module exploits an unauthenticated RCE in SPIP use exploit/multi/http/spip/autosaverce msf undefinedautosaverce show actions ...actions... msf undefinedautosaverce set ACTION msf undefinedautosaverce show options ...show and set options... msf undefinedautosaverce run This module requires...

Linux Distros Unpatched Vulnerability : CVE-2026-58582

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - qemu - None Ubuntu Linux - hw/uefi: non-NUL variable policy name causes heap-buffer- overflow in printpolicyentry CVE-2026-58582 Note that Nessus...

openSUSE 16 Security Update : vim (openSUSE-SU-2026:21671-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21671-1 advisory. Updated to version 9.2.0957. Security issues fixed: - CVE-2026-73070: stack buffer overflow in the socket server can lead to denial of service...

openSUSE 16 Security Update : broot (openSUSE-SU-2026:21675-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21675-1 advisory. Changes in broot: - v1.59.0 CVE-2026-72847 boo1275994 new shellcommand verb attribute: run a command through a shell sh -c / cmd /C so &&, ; and pipes...

chisel v1.12.0

Chisel Chisel is a fast TCP/UDP tunnel, transported over HTTP, secured via SSH. Single executable including both client and server. Written in Go golang. Chisel is mainly useful for passing through firewalls, though it can also be used to provide a secure endpoint into your network. Table of...

Malicious code in discord-mfa (npm)

Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from https://limbomail.com/api/attachment/rEa6rTkGfT.o7nh0aBVvDQWmOG47NPBQ3pUjduHeiw to...

Malicious code in discord-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from...

MAL-2026-15552 Malicious code in discord-mfa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb4ed3f4fab9ec795405127517bce22b0aad8277ba7db65a563d311660334760 On require'discord-mfa', index.js loads lib/cache.js which, when running on Windows, downloads a JavaScript payload from...

EUVD-2026-67936

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

PT-2026-83435

Name of the Vulnerable Software and Affected Versions argocd-mcp version 0.8.0 Description The software binds its HTTP transport to every network interface 0.0.0.0 and accepts MCP sessions without requiring caller credentials when the ARGOCD API TOKEN variable is configured. This allows a...

PT-2026-83499

Name of the Vulnerable Software and Affected Versions itsourcecode Sales and Inventory System version 1.0 Description A security flaw allows remote attackers to perform SQL injection, a technique where malicious SQL statements are inserted into entry fields for execution. The issue exists in the...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-002515)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002515 advisory. In the Linux kernel, the following vulnerability has been resolved: net: iptunnel: make sure to pull inner header in iptunnelrcv Apply the same fix than ones found i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001398)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001398 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: fix OOB devmap writes when deleting elements Jordy reported issue against XSKMAP which also...

Security update for broot (moderate)

openSUSE security update: security update for broot ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21675-1 Rating: moderate References: bsc1275994 Cross-References: CVE-2026-72847 CVSS scores: CVE-2026-72847 SUSE : 4.6...

Security update for vim (important)

openSUSE security update: security update for vim ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21671-1 Rating: important References: bsc1268162 bsc1271684 bsc1275011 bsc1275012 bsc1275013 bsc1275014 bsc1275015 bsc1275016 bsc1275017 bsc1275018...

PT-2026-89178

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.5 through 0.11.0 Description An authenticated user can perform a Server-Side Request Forgery SSRF attack when the AIOHTTP CLIENT ALLOW REDIRECTS variable is set to true. The platform fails to reapply the WEB FETCH FILTE...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001499)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001499 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: fix potential out of bounds in ucsiccgupdatesetnewcamcmd The cmd variable can be...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001496)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001496 advisory. In the Linux kernel, the following vulnerability has been resolved: bpf: Fix DEVMAPHASH overflow check on 32-bit arches The devmap code allocates a number hash bucke...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001454)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001454 advisory. In the Linux kernel, the following vulnerability has been resolved: 9p/xen: fix release of IRQ Kernel logs indicate an IRQ was double-freed. Pass correct device ID...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001391)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001391 advisory. In the Linux kernel, the following vulnerability has been resolved: btrfs: ref-verify: fix use-after-free after invalid ref action At btrfsreftreemod after we...