discover

Discover Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux. Lee Baird @discoverscripts Jay "L1ghtn1ng" Townsend @jaytownsend...

CVE-2026-63151

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

EUVD-2026-125582

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

PT-2026-147029

Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5calendarId.userId, both small enumerable integer...

Astra Linux – vulnerability in linux-6.1, linux-6.12, linux-6.18

In the Linux kernel, the following vulnerability has been resolved: misc: bcm-vk: Use acquire/release for msgqinited bcmvksyncmsgq fills the message queue information and then sets msgqinited. Readers call bcmvkdrvaccessok before accessing the message queues and their cached queue information...

Linux kernel DoS

The vulnerability in the vmcihostpoll function within the drivers/misc/vmwvmci/vmcihost.c component of the Linux kernel operating system is related to an improper thread management implementation. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

AlmaLinux 9.6 [TuxCare] Security Update: go-toolset / golang / golang-bin / golang-docs / golang-misc / etc (ALMALINUX9.6:CLSA-2026:1793625180)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1793625180 advisory. - Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a...

CVE-2026-116505

A vulnerability was found in TOTOLINK A950RG 4.1.2cu.5268B20221104. This impacts the function getDeviceInfo of the file /var/lib/misc/udhcpd.leases of the component device-information Handler. The manipulation of the argument MAC address results in command injection. The attack can be launched...

TOTOLINK A950RG input validation error vulnerability

The TOTOLINK A950RG running version 4.1.2cu.5268B20221104 contains a security vulnerability. This vulnerability stems from improper handling of the MAC address parameter in the getDeviceInfo function within the file /var/lib/misc/udhcpd.leases in the device-information Handler component,...

CLSA-2026-1777616064 kernel: Fix of 264 CVEs

crypto: algifaead - Fix minimum RX size check for decryption CVE-2026-31431 - crypto: afalg - Fix page reassignment overflow in afalgpulltsgl CVE-2026-31431 - crypto: authencesn - reject too-short AAD assoclen8 to match ESP/ESN spec CVE-2026-31431 - crypto: authencesn - Fix src offset when...

Zephyr authorization issue vulnerability

Versions Zephyr 3.6.0 through 4.5.0 contain an authorization issue vulnerability. This vulnerability stems from the exposure of the device multiplexer pseudo-driver in drivers/misc/devmux/devmux.c; specifically, the system calls devmuxselectget and devmuxselectset are not properly validated by th...

Linux Heap Buffer Overflow DoS

The vulnerability in the imspcugetcdcuniondesc function within the drivers/input/misc/ims-pcu.c file of the Linux kernel operating system is related to an improper implementation of the control flow. Exploitation of this vulnerability may allow an attacker to cause a denial of service...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the drivers/input/misc/ims-pcu.c component of the Linux kernel is related to buffer overflow conditions. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality and availability of protected information...

Linux kernel Heap Buffer Overflow DoS

The vulnerability in the drivers/input/misc/ims-pcu.c component of the Linux kernel stems from inadequate resource management during its existence. Exploitation of this vulnerability may enable an attacker to compromise the confidentiality, integrity, and availability of protected information...

CVE-2026-98741

The Linux kernel ALSA driver for ua101 is vulnerable to a slab-out-of-bounds write in start_usb_playback() located in sound/usb/misc/ua101.c. The root cause is that detect_usb_format() fails to validate the relationship between wMaxPacketSize and bNrChannels across capture and playback interfaces...

CVE-2026-98741 ALSA: ua101: reject mismatched capture/playback packet sizes

In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSize...

CVE-2026-98741 ALSA: ua101: reject mismatched capture/playback packet sizes

In the Linux kernel, the following vulnerability has been resolved: ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and playback interfaces, but never relates the two endpoints' wMaxPacketSize...

CLSA-2026-1771077729 kernel: Fix of 108 CVEs

net/ieee802154: don't warn zero-sized rawsendmsg CVE-2022-50706 - bpf: Don't redirect packets with invalid pktlen CVE-2022-49975 - media: uvcvideo: Fix 1-byte out-of-bounds read in uvcparseformat CVE-2025-38680 - ipv6: addrlabel: fix infoleak when sending struct ifaddrlblmsg to network...

Linux Distros Unpatched Vulnerability : CVE-2026-98741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ALSA: ua101: reject mismatched capture/playback packet sizes detectusbformat cross-checks bSubframeSize, bBitResolution and tSamFreq between the capture and...

PT-2026-116960

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ALSA ua101 driver where the detect usb format function fails to validate the relationship between the wMaxPacketSize and bNrChannels of capture and playback...