The vulnerability of the osd_fault() function in the net/ceph/osd_client.c module, which is part of the Linux kernel’s networking functions, allows a hacker to trigger a service failure.

The vulnerability of the osdfault function in the net/ceph/osdclient.c module, which implements kernel networking functions in the Linux operating system, is related to state management errors. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the gpio_virtuser_device_config_group_release() function in the drivers/gpio/gpio-virtuser.c file of the Linux operating system’s GPIO driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gpiovirtuserdeviceconfiggrouprelease function in the drivers/gpio/gpio-virtuser.c file of the Linux kernel’s GPIO driver is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

PT-2026-76888

Name of the Vulnerable Software and Affected Versions Terragrunt versions prior to 1.0.4 Description Terragrunt contains a flaw that allows arbitrary file deletion when downloading external modules. The issue occurs during the directory cleanup process within the fileManifest.Clean function locat...

RHEL 8 : 389-ds:1.4 (RHSA-2026:55757)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:55757 advisory. 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The base packages include the Lightweight Directory Access Protocol LDAP...

FreeBSD : PostgreSQL -- Multiple vulnerabilities (05d311bc-9991-11f1-bc50-6cc21735f730)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 05d311bc-9991-11f1-bc50-6cc21735f730 advisory. The PostgreSQL project reports: CVE-2026-6464: psql COPY FROM STDIN, if the copy fails before...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100380)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100380 advisory. In the Linux kernel, the following vulnerability has been resolved: netfilter: conntrack: Avoid nfcthelperhash uses after free If nfconntrackinitstart fails for...

Security update for git-cliff (important)

openSUSE Security Update: Security update for git-cliff Announcement ID: openSUSE-SU-2026:0287-1 Rating: important References: 1248065 1274523 Cross-References: CVE-2025-55159 CVE-2026-25541 CVSS scores: CVE-2025-55159 SUSE: 5.8 CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-099918)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099918 advisory. In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevfcleanrxirq prunes frames who...

SindriKit v1.6.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

CVE-2026-74797

OpenTofu versions before 1.11.4 contain a denial of service vulnerability in the tofu init command when processing maliciously-crafted .zip archives for provider or module packages. Attackers can cause excessive CPU usage by controlling .zip archive content served during dependency installation,...

CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

DEBIAN-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

DEBIAN-CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

CVE-2024-58375

OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...

CVE-2026-72887

Net::OAuth::Client versions before 0.32 for Perl allow the service provider to silently downgrade OAuth 1.0a to OAuth 1.0 in getrequesttoken. Passing a callback to the constructor selects OAuth 1.0a. getrequesttoken then revokes that choice when the request token response omits...

UBUNTU-CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...

UBUNTU-CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

CVE-2026-72888

Net::OAuth versions before 0.32 for Perl allow memory exhaustion via unbounded caching of failed module loads in smartrequire. smartrequire stores results in a process-global hash with no bound and no eviction, and keeps an entry for every class name it is asked about, including names that failed...

CVE-2026-19349

Lemonldap::NG::Portal versions from 2.0.0 before 2.16.9, from 2.17.0 before 2.21.5, from 2.22.0 before 2.23.3 for Perl allow authentication bypass via an OAuth2 state parameter stored as an SSO session in the GitHub and LinkedIn backends. Before redirecting to the identity provider, extractFormIn...