7202 matches found
PT-2026-81961
The AI Engine WordPress plugin before 3.7.2 does not confine a caller-supplied URL when mapping it to a local filesystem path before reading the file and forwarding its contents to an external service, allowing users with a subscriber-level account to read arbitrary files from the server and...
PT-2026-82198
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the drm/shmem helper component where the -huge fault handler fails to verify if a PMD Page Middle Directory huge page mapping exceeds the boundaries of the VMA Virtual...
WPProbe Plugin Enumeration Tool 0.12.11
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
Linux Distros Unpatched Vulnerability : CVE-2026-80582
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/shmemhelper: Check VMA boundaries for PMD mappings In the -hugefault handler do not install a PMD huge page mapping if the huge page exceeds the boundaries ...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-104580)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104580 advisory. In the Linux kernel, the following vulnerability has been resolved: nvmet-rdma: handle inline data with a nonzero offset nvmetrdmauseinlinesg maps the host-controll...
CVE-2026-65182 Apache Tomcat: Bypass longest prefix security constraint
Improper Access Control, Incorrect Authorization vulnerability in Apache Tomcat leads to security constraint bypass if a constraint for a longer path is specified before a more restrictive constraint for a shorter sub-path. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from...
BIT-KEYCLOAK-2026-11986 Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak
A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...
WordPress Advanced Form Integration plugin < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability
Unauthenticated Privilege Escalation via Breakdance Form Role Mapping vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Advanced Form Integration versions 2.1.1...
CVE-2026-74622
A flaw was found in the Linux kernel's 'atlantic' network driver. The aqringrxdeinit function, responsible for deinitializing receive RX buffers, fails to properly free pages and their associated Direct Memory Access DMA mappings for buffers that have been consumed but not yet refilled. This...
cybersecurity-home-lab-btp
🛡️ Laboratorio Domestico di Cybersecurity — Rilevamento e Monitoraggio B.Tech Project BTP | IIIT Pune Basato su: "Designing and Implementing an Effective Cybersecurity Home Lab for Detection and Monitoring" — ICCCNT 2023, IIT Delhi Un laboratorio domestico di cybersecurity completamente funzionant...
Nettacker v0.4.1
OWASP Nettacker DISCLAIMER THIS SOFTWARE WAS CREATED FOR AUTOMATED PENETRATION TESTING AND INFORMATION GATHERING. YOU MUST USE THIS SOFTWARE IN A RESPONSIBLE AND ETHICAL MANNER. DO NOT TARGET SYSTEMS OR APPLICATIONS WITHOUT OBTAINING PERMISSIONS OR CONSENT FROM THE SYSTEM OWNERS OR ADMINISTRATORS...
SUSE CVE-2026-68427
In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1xboclearcachedmappings host1xbounpin drops the last reference to the mapping and frees it, so we can't dereference mapping afterwards. The cache itself outlives the mapping, so use the cach...
WPProbe Plugin Enumeration Tool 0.12.10
A fast WordPress plugin and theme scanner that detects installed plugins via REST API enumeration and themes from HTML discovery, then maps them to known vulnerabilities. Over 5,000 plugins detectable without brute-force, thousands more with it...
CVE-2026-74641
A flaw was found in the Advanced Linux Sound Architecture ALSA usx2y driver in the Linux kernel. A local attacker, by opening the hwdep node of an attached US-X2Y device, could exploit an unbounded memory mapping mmap fault offset. This allows read-write access to arbitrary kernel memory,...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: fs: refuse OTMPFILE creation with an unmapped fsuid or fsgid The vfstmpfile function never checks whether the caller’s fsuid and fsgid are mapped into the filesystem. On an idmapped mount, where idmapping does not cover the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: vdpa/octeonep: fixed the IRQ-to-ring mapping in the interrupt handler. Look up the IRQ index in octhw-irqs instead of assuming irqs0. This approach supports non-contiguous IRQ numbers and avoids incorrect ring indexing when irqs0...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Currently, KVM maps the L1 VNCR into the host stage-1 by relying entirely on the permissions of the guest stage-1. At the same time, it is entirely possible that the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Fixed an off-by-one error in the decoding of mapping pairs by validating bounds checks. In ntfsmappingpairsdecompress, attrend points to one byte past the end of the attribute record: attrend = u8 attr +...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: rtase: Fixed the issue of double-freeing of multi-fragment skbs when there is a failure in the DMA mapping. In rtasestartxmit, when the DMA mapping of the head buffer fails after rtasexmitfrags has mapped all fragments, the error...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerabilities have been resolved: RDMA/mlx5: Fixed the issue where UMR XLT cleanup was performed during ODDP population failures. The mlx5rumrupdatexlt function allocates and DMA maps an XLT buffer using mlx5rumrcreatexlt. The buffer is released through the...