Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-107288)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-107288 advisory. In the Linux kernel, the following vulnerability has been resolved: closures: Change BUGON to WARNON If a BUGON can be hit in the wild, it shouldn't be a BUGON For...

SUSE SLED15: libopenssl-3-devel / libopenssl-3-fips-provider / etc (SUSE-SU-2026:3835-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3835-1 advisory. OpenSSL is updated to 3.5.0 in SLE-15-SP7: jscPED-16072 Enables Post-Quantum Cryptography PQC TLS support...

PT-2026-90279

In the Linux kernel, the following vulnerability has been resolved: ip6 tunnel: use skb cow head in ip6 tnl xmit ip6 tnl xmit may need to expand headroom before it can push the outer IPv6 and optional encap headers. It currently does that with skb realloc headroom, copies skb-sk ownership, consum...

PT-2026-90253

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Reject short RFC 4121 MIC tokens in gss krb5 verify mic v2 gss krb5 verify mic v2 reads the token ID at ptr0..1, the flags byte at ptr2, and padding at ptr3..7, then passes ptr + GSS KRB5 TOK HDR LEN and cksum len to gss...

PT-2026-90094

In the Linux kernel, the following vulnerability has been resolved: ALSA: virmidi: Check card index validity at probe virmidi driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

PT-2026-90364

In the Linux kernel, the following vulnerability has been resolved: ceph: cap delegated inode count in ceph parse deleg inos ceph parse deleg inos decodes interval sets of delegated inode numbers from an MDS create-with-delegation reply. For each set it reads a 64-bit start and a 64-bit len with...

PT-2026-90099

In the Linux kernel, the following vulnerability has been resolved: ALSA: mpu401: Check card index validity at probe mpu401 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the module probe...

PT-2026-90095

In the Linux kernel, the following vulnerability has been resolved: ALSA: serial-u16550: Check card index validity at probe serial-u16550 driver blindly trusts that the given devptr-id value is within the proper card index range at probe. It's OK for the devices the driver itself creates at the...

PT-2026-90542

Summary Four Livewire components in the Settings area expose destructive Filament actions delete / edit that perform no server-side authorization. Any authenticated user who can reach the Settings pages — i.e. holding only the coarse access setting permission, without being an admin and without a...

Security update for containerized-data-importer1.65 (important)

openSUSE security update: security update for containerized-data-importer1.65 ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21824-1 Rating: important References: bsc1238699 bsc1239322 bsc1241838 bsc1248946 bsc1251495 bsc1251689 bsc1253506 bsc12537...

CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth - ILIAS < 9.22_ 10.0 < 10.10_ 11.0 < 11.3 - RCE

!/usr/bin/env python3 Exploit Title: ILIAS save$this-filename - fileputcontents$filename, jsonencode$cookies. Attacker-chosen path + JSON-embedded PHP = webshell. Tested: ILIAS 10.9 on Rocky Linux 9 Apache + PHP-FPM 8.2, MariaDB bac...

PT-2026-90005

When tarfile extracts a link on a system that doesn't support links, it falls back to extracting a member from the archive. In this case, the filter function is run twice: once for the extracted member, and once with name set to the location of the link. For one of the calls, the return value was...

PT-2026-90098

In the Linux kernel, the following vulnerability has been resolved: ALSA: mts64: Check card index validity at probe Although mts64 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This may lead ...

PT-2026-90096

In the Linux kernel, the following vulnerability has been resolved: ALSA: portman2x4: Check card index validity at probe Although portman2x4 driver has a check of the given devptr-id value, it doesn't check for a negative id, which is often given as "none" or such value when bound via sysfs. This...

PT-2026-90385

In the Linux kernel, the following vulnerability has been resolved: nfsd: initialize copy-notify stateid before publishing it nfsd4 copy notify finished initializing the cpntf state after nfs4 alloc init cpntf state had already linked it into the s2s cp stateids IDR and the parent's sc cp list,...

openSUSE 16: tomcat11 / tomcat11-admin-webapps / tomcat11-el-6_0-api / etc (openSUSE-SU-2026:21811-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21811-1 advisory. - CVE-2026-65182: Bypass longest prefix security constraint bsc1276893. - CVE-2026-65183: TOCTOU when setting specific permissions for Unix Doma...

CVE-2025-55182

CVE-2025-55182 実際の説明をお探しの場合は、msanft/CVE-2025-55182 にわかりやすい説明（動作する PoC 付き）があります。 このリポジトリには、私が試した中で興味深い（ような）結果が得られたいくつかの試みが含まれているだけです。 ./thing.py に動作する PoC が含まれるようになりました。その大部分は https://gist.github.com/maple3142/48bc9393f45e068cf8c90ab865c0f5f3 から引用したものです。 古い内容 テンプレート: root@kitploit: !/usr/bin/env...

check-cve-2019-19781

check-cve-2019-19781 🔎🐞 此工具用于检测主机是否易受 CVE-2019-19781 影响。 系统要求 Python 3.6 及以上版本。请注意， 不支持 Python 2。 安装 通过发行版安装： root@kitploit: pip install https://github.com/cisagov/check-cve-2019-19781/releases/download/v1.0.2/cve201919781-1.0.2-py3-none-any.whl 从源码安装： root@kitploit: git clone...

CVE-2021-41773

CVE-2021-41773 Apache HTTP服务器漏洞（仅影响2.4.49版本） 需求设置 httpd.conf root@kitploit: ... LoadModule cgimodule modules/modcgi.so 取消注释这一行 ... AllowOverride none Require all denied 注释掉这一行或设置为Require all granted ... 参考 https://attackerkb.com/topics/1RltOPCYqE/cve-2021-41773/rapid7-analysis...

CVE-2023-4911

CVE-2023-4911-Looney-Tunables Looney Tunables ローカル権限昇格 CVE-2023-4911 ワークショップ 教育目的のみ リンク: IPPSECのビデオ Qualsysのブログ記事 Qualsysの技術詳細 エクスプロイトPOC Pythonスクリプト GLIBCソース GLIBCチューナブルのドキュメント 説明 ld.soとは？ コンピューティングにおいて、動的リンカーとは、実行可能ファイルが実行される際に、その実行ファイルが必要とする共有ライブラリをロードしてリンク...