EUVD-2026-70332

In the Linux kernel, the following vulnerability has been resolved: Revert "drm/amdgpu: fix aperture mapping leak" devres teardown is LIFO. The aperture devres node was registered after the DRM device node, so devresreleaseall unmaps the aperture before the DRM device release callback fires...

EUVD-2026-70333

In the Linux kernel, the following vulnerability has been resolved: mm/hugememory: initialise workingset state before folio split xastrysplit adds GFPACCOUNT for page-cache xanodes, but foliosplit leaves the xastate's xalru unset. That lets a live, memcg-charged xanode exist without being linked...

EUVD-2026-70330

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726

CVE-2026-80726 affects the Linux kernel's KVM x86 MMU subsystem . The root cause is that role.invalid is not explicitly cleared when deriving a child shadow page's role from its parent. This violates KVM's invariant that invalid pages are not on the active MMU page list, leading to a use-after-fr...

CVE-2026-80726

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

CVE-2026-80726 KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page

In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's...

secbench-dvwa

DAMN VULNERABLE WEB APPLICATION Damn Vulnerable Web Applicati...

poc-CVE-2025-38352

🚀 poc-CVE-2025-38352 - Easy Download for a Security Tool 📥 Download Now 📖 Overview This application is a proof of concept for CVE-2025-38352. It demonstrates a vulnerability in the Linux kernel's POSIX CPU timers implementation. The September 2025 Android Bulletin notes that this vulnerability ha...

dnscontrol v5.0.2

DNSControl DNSControl is Infrastructure as Code for DNS. It includes a full-featured configuration language Javascript-compatible, plus "plug-ins" that speak to DNS provider APIs such as AWS Route 53, Cloudflare, and Gandi. It can send the same DNS records to multiple providers. It runs anywhere ...

ms-365-mcp-server-PoC

ms-365-mcp-server: security advisory CVE status: reques...

ironclaw ironclaw-v1.4.0

IronClaw Your secure personal AI assistant, always on your side English | 简体中文 | Русский | 日本語 | 한국어 Reborn Quick Start • Philosophy • Features • Installation • Configuration • Security • Architecture IronClaw Reborn Quick Start IronClaw Reborn is the standalone runtime on the reborn-integration...

linux-entra-sso-PoC

Summary CVE status: requested, pending assignment. This...

crw-PoC

crw: security advisory CVE status: requested, pending a...

skyvern v1.0.52

🐉 Automate Browser-based workflows using LLMs and Computer Vision 🐉 Skyvern automates browser-based workflows using LLMs and computer vision. It provides a Playwright-compatible SDK that adds AI functionality on top of playwright, as well as a no-code workflow builder to help both technical and...

CVE-2025-55182

RSC Detector - React Server Components Vulnerability Scanner A Python-based security scanner for detecting and exploiting React Server Components RSC vulnerabilities in Next.js applications. This tool performs passive detection, active fingerprinting, and RCE exploitation testing. ⚠️ WARNING : Thi...

Security update for libvirt

This update for libvirt fixes the following issues: CVE-2026-18917: remote: Fix integer overflow in RPC handler for virNodeGetFreePages bsc1275863 CVE-2026-63622: util: virFileChownFiles: do not follow symlinks bsc1275264 CVE-2026-63623: storage: create images with a private umask during qemu-img...

hosts v3.16.111

!IMPORTANT Cloning this repository can take a long time! You probably just want to start with the latest version, not its whole history since 2018. Therefore you probably want to use git clone --depth 1 ... to save significant time. !NOTE With the exception of issues and PRs regarding changes to...

hdwebmobile-photo-video-reviews

HDWebmobile Photo & Video Reviews A WooCommerce plugin that lets customers attach photos and short videos to their product reviews, shown right in the review list on the product page. WordPress.org: https://wordpress.org/plugins/hdwebmobile-photo-video-reviews/ pending first submission Requires:...

ThreatDetect

ThreatDetect ThreatDetect is a Streamlit-based insider threat detection prototype that analyzes employee activity data and flags potentially risky behavior. It uses a trained XGBoost classifier together with an Isolation Forest anomaly detector to produce organisation-level risk summaries and...