CVE-2026-25267 Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization...

CVE-2026-25267 Missing Authorization in Core

Memory corruption when non-secure loader rewrites page tables before secure memory initialization...

CVE-2026-48908

CVE-2026-48908 — SP Page Builder Joomla Unauthenticated RCE Exploit Critical CVSS v4: 10.0 — Proof-of-concept exploit for unauthenticated remote code execution in SP Page Builder comsppagebuilder for Joomla. 📋 Vulnerability Overview Attribute| Value ---|--- CVE ID| CVE-2026-48908 Severity| Critic...

copy-fail-checker

Copy Fail Checker — CVE-2026-31431 A small, dependency-light Bash script that tells you whether your Linux system is exposed to the Copy Fail local privilege-escalation vulnerability CVE-2026-31431. The script is read-only : it never exploits the bug, never loads kernel modules, and never modifie...

PageBuilderCK-CVE-2026-56290-Exploit

Page Builder CK — fonts.save RCE Probe CVE-2026-56290 BlackHat Team proof-of-concept scanner for the Joomla Page Builder CK fonts.save vulnerability. POC CVE-2026-56290 Author: @mrzblackhat Team: BlackHat Team Credits: Peyman Siyahi · MR.PERSIA Overview This tool probes Joomla sites running the...

CVE-2026-48908

🚨 CVE-2026-48908 — Full Server Compromise via Arbitrary File Upload Critical Unauthenticated File Upload → Remote Code Execution RCE A critical vulnerability in SP Page Builder allows unauthenticated attackers to upload arbitrary files and achieve Remote Code Execution RCE , potentially leading t...

CVE-2025-10035

CVE-2025-10035 How does this detection method work? Detects vulnerable GoAnywhere MFT instances by extracting version numbers from the login page and matching against affected version ranges. How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run t...

KVM-Januscape

KVM-XJ Hot Patch dumptool.py automatically finds offsets; how to use it? Just read the code. Vulnerability Overview CVE-2026-53359 Januscape is a use-after-free UAF vulnerability in the Linux kernel KVM shadow MMU. Lurking time : 16 years August 2010 to July 2026 Affected range : All Intel/AMD x8...

CVE-2026-105750

A flaw was found in docling. This vulnerability can lead to information disclosure when HTML page rendering is enabled. The document rendering backend fails to enforce local file access restrictions or confine requests to the source document directory. An attacker could exploit this issue by...

PT-2026-106583

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the swiotlb bounce function where the highmem branch incorrectly handles the page frame number and the offset when tlb offset is non-zero, which occurs during partial...

PT-2026-106690

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Restore HMM PFN WRITE check in ODP write paths Commit 0b261d7c1cd3 "RDMA/rxe: Break endless pagefault loop for RO pages" dropped the access permission test from rxe check pagefault and left only HMM PFN VALID. A page...

PT-2026-106545

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the hfi1 file mmap function within the IB/hfi1 driver regarding the PIO CRED credit-return memory mapping. The implementation contains two primary errors: first, it...

PT-2026-106345

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Memory corruption occurs when a non-secure loader rewrites page tables before the secure memory initialization process is completed. Recommendations At the momen...

Linux Distros Unpatched Vulnerability : CVE-2026-98216

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IB/hfi1: Fix the PIOCRED credit-return mmap hfi1filemmap's PIOCRED case must hand user space the single credit-return page that holds this context's entry. That...

Linux Distros Unpatched Vulnerability : CVE-2026-98254

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - swiotlb: use the adjusted address for the highmem page lookup swiotlbbounce reads the page frame number from the slot's recorded origaddr, then advances origadd...

PT-2026-106648

In the Linux kernel, the following vulnerability has been resolved: drm: Fix drm pending vblank event leak in error path for out fence ptr When an out fence ptr is provided but DRM MODE PAGE FLIP EVENT is not set, a drm pending vblank event will be allocated. If later, there is an allocation...

PT-2026-106847

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in SiteIsolation allows a remote attacker to execute arbitrary code via a crafted HTML page. SiteIsolation is a security feature that ensures pages from differen...

CVE-2026-106220: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Passwords in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106231: Use of Uninitialized Resource

Uninitialized resource in Dawn in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-106258: Use of Uninitialized Resource

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...