CVE-2026-68203

CVE-2026-68203—Linux kernel media: vivid driver : The issue is a cleanup bug in vivid_init() that can cause a reference leak when platform_device_register() fails. The embedded device in vivid_pdev is initialized via device_initialize(), but on failure the path jumps to free_output_strings withou...

EUVD-2026-55304

In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vividinit When platformdeviceregister fails in vividinit, the embedded struct device in vividpdev has already been initialized by deviceinitialize, but the failure path jumps to freeoutputstrings...

CVE-2026-71946

creationtimestamp| type| source ---|---|--- 2026-08-10 11:09:12+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mspxl6c7yy2k 2026-08-10 11:09:15+00:00| seen| https://mastodon.social/users/hugovalters/statuses/117070898926234227...

CVE-2026-72574 picocms Pico - Host Header Injection Enables Script Source Hijacking

A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme. When baseurl is unset the default, Pico::getBaseUrl in lib/Pico.php builds the base URL from unvalidated...

emp3r0r v4.9.0

emp3r0r Self‑healing Gossip Mesh C2 with Assisted Peer Discovery, Cross-Platform BOF Execution, and Scriptable Agents. What is emp3r0r? emp3r0r is an advanced, zero-trust post-exploitation framework and command & control C2 system designed for Linux and Windows target environments. Built from the...

ROS-20260810-73-0023

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-69875

Name of the Vulnerable Software and Affected Versions Pega Platform versions 8.5.0 through 25.1.2 Description Improper validation of cryptographic signatures may allow an attacker to bypass security controls. Recommendations At the moment, there is no information about a newer version that contai...

ROS-20260810-73-0024

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260810-73-0004

The vulnerability of the JAXP component in the Oracle Java SE software platform and the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker, operating remotely, to...

CVE-2026-48048: Exposure of Private Personal Information to an Unauthorized Actor

XWiki Platform is a generic wiki platform. XWiki discovered that the patch for GHSA-5cf8-vrr8-8hjm was insufficient. Starting with version 6.2.1 and prior to versions 18.0.0RC1, 17.10.13, 17.4.9 and 16.10.17, with slightly modified parameters to the LiveTableResults, it is still possible to...

CVE-2026-10754: Improper Verification of Cryptographic Signature

Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls...

ROS-20260810-73-0022

The vulnerability in gpac is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

libarchive security update

3.7.7-10 - Related: CVE-2026-14164 3.7.7-9 - Resolves: CVE-2026-14164...

Live-Forensicator v4.2.0

🛡️ Forensicator 🛡️ Cross-platform Incident Response & Live Forensics Toolkit Windows PowerShell | Linux Bash | macOS Shell Built for fast, structured, and actionable forensic investigations. 🤔 About Forensicator is a cross-platform incident response and live forensics toolkit. It is designed to...

yeti v2.6.1

Yeti Platform Yeti aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams. It was born out of frustration of having to answer the question "where have I seen this artifact before?" or "how do I search for IOCs related t...

AutoSRC-AISkill

AutoSRC-AISkill A fully automated SRC vulnerability discover...

CVE-2026-19190

creationtimestamp| type| source ---|---|--- 2026-08-09 09:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msn7wj4u3225...

GHSA-9RJ7-RF2P-W77R vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

GHSA-WVPP-8HX9-P66J vulnerabilities

Vulnerabilities for packages: mlflow, checkov...

GHSA-2V37-7H3G-55P8 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, keep, nextcloud-server, gitlab-rails-ce, json-server, pelias-api, tensorflow-gpu-jupyter, arangodb, jupyter-base-notebook, commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee, dotstatsuite-supercore, unleash, jitsucom-jitsu,...