Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053289)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053289 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nSVM: Ignore nCR34:0 when loading PDPTEs from memory Ignore nCR34:0 when loading PDPTEs from...

PT-2026-86504

The JetFormBuilder WordPress plugin before 3.6.5.2 does not sanitize a request parameter before rendering it as message content, allowing unauthenticated users to execute arbitrary shortcodes registered on the site on any page displaying a form. Escaping is applied to that content before a later...

PT-2026-86485

🚨 CVE-2026-84219 The Kirki WordPress plugin before 6.3.0 does not hold back every spelling of the HTML entities it decodes when rendering, allowing unauthenticated users to store JavaScript in a comment which then runs in the session of anyone viewing a page that displays it, including an...

PT-2026-86484

The Bold Page Builder WordPress plugin before 5.9.9 does not sanitise and escape a shortcode attribute before outputting it in an HTML attribute, allowing users with the Contributor role and above to inject arbitrary web scripts that execute when a user views the affected page...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073352)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073352 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnetdellink rmnetdellink removes the endpoi...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053409)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053409 advisory. In the Linux kernel, the following vulnerability has been resolved: xhci: Fix Panther point NULL pointer deref at full-speed re-enumeration re-enumerating full-speed...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053406)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053406 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: make apf token non-zero to fix bug In current async pagefault logic, when a page is...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-073374)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-073374 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: usbtouchscreen - clamp NEXIO datalen/xlen to URB buffer size nexioreaddata pulls datalen a...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053346)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053346 advisory. In the Linux kernel, the following vulnerability has been resolved: mm/vmscan: don't try to reclaim hwpoison folio Syzkaller reports a bug as follows: Injecting memo...

Debian dla-4774 : aom-tools - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4774 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4774-1 [email protected]...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053224)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053224 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix Virtual Memory mapping boundaries calculation Calculating the size of the mappe...

Debian dsa-6485 : tryton-server - security update

The remote Debian 13 host has packages installed that are affected by a vulnerability as referenced in the dsa-6485 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6485-1 [email protected] https://www.debian.org/security/ Moritz...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053250)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053250 advisory. In the Linux kernel, the following vulnerability has been resolved: tcp: check skb is non-NULL in tcprtodeltaus We have some machines running stock Ubuntu 20.04.6...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053291)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053291 advisory. In the Linux kernel, the following vulnerability has been resolved: liquidio: Adjust a NULL pointer handling path in liovfrepcopypacket In liovfrepcopypacket...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053223)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053223 advisory. In the Linux kernel, the following vulnerability has been resolved: sched, cpuset: Fix dlcpubusy panic due to empty cs-cpusallowed With cgroup v2, the cpuset's...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053218)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053218 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Handle SRCU initialization failure during page track init Check the return of...

CVE-2026-11645

CVE-2026-11645 - V8 in Google Chrome prior to Remote Code Execution Quick Usage root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe Exploitation Notes Severity: HIGH CVSS: 8.8 Impact: Confidentiality, Integrity, Availability Published: 2026-06-09...

CVE-2026-12960

CVE-2026-12960 Improper Export of Android Application Components in the ASUS Router App A component bundled in the ASUS Router Android app com.asus.aihome was declared android:exported="true" with no android:permission. Any other app on the same device, holding zero permissions, could send it a...

CVE-2021-3262

CVE-2021-3262 SQL Injection in TripSpark VEO Transportation / NovusEDU The public "Student Busing Information" lookup page shipped with TripSpark VEO Transportation takes unauthenticated POST body input and concatenates it into a SQL Server query without parameterisation or server-side validation...

CVE-2026-45332-PoC

CVE-2026-45332: Broken Access Control in Automad CMS Proof of concept for CVE-2026-45332 , a Broken Access Control vulnerability in Automad CMS that allows any unauthenticated attacker to dump the bcrypt password hash and TOTP secret of every administrator account through the setup endpoint, whic...