30557 matches found
EUVD-2025-210799
An issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter PC values when SPR changes can lead to a Denial of Service DoS...
Linux Distros Unpatched Vulnerability : CVE-2026-80554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is ...
SUSE SLES15: libblkid-devel / libblkid-devel-static / libblkid1 / etc (SUSE-SU-2026:3685-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:3685-1 advisory. - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: isula-build (UTSA-2026-093146)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093146 advisory. isula-build before 0.9.5-6 can cause a program crash, when building container images, some functions for processing external data do not remove spaces when processin...
Linux Distros Unpatched Vulnerability : CVE-2026-80555
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/vfioccw: Free all memory if cpinit fails The routine cpfree is called to unpin/free any memory once an I/O is completed successfully, or if cpprefetch fail...
EUVD-2026-66081
Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...
Frontier AI: Vulnerability Management's Systemic Revolution
Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time and has gone through waves of contention and thankfulness. While this...
PT-2026-81588
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description An information leak exists that allows a local attacker to potentially obtain sensitive information through a local program. Recommendations Update Google Chrome on iOS to versio...
CVE-2026-78981: Exposure of Sensitive Information to an Unauthorized Actor
Information leak in Mobile in Google Chrome on on iOS prior to 152.0.7977.65 allowed a local attacker to potentially obtain sensitive information via a local program. Chromium security severity: Low...
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD modsql post-authentication SQL injection - RCE postauthstorrce.py --host --port 21 \ --user --password \ --shell-host --shell-port 4444 SUMMARY ------- ProFTPD's modsql logs FTP activity through user-supplied SQL. Its escaping helper isescapedtex...
SUSE-SU-2026:23255-1 Security update for util-linux
This update for util-linux fixes the following issues: Security issues fixed: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues...
Security Bulletin: IBM OpenPages is affected by multiple security vulnerabilities of DB2 Database Server (August 2026)
Summary IBM® Db2® Database Server is shipped as a supporting program of IBM OpenPages. Information about security vulnerabilities affecting IBM Db2 Database Server has been published in multiple security bulletins. Vulnerability Details Refer to the security bulletins listed in the...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: bpf,perf: Fixed an invalid progarray access in perfeventdetachbpfprog Syzbot reported a crash that occurs in the following tracing scenario: - Create a tracepoint with attr.inherit=1, attach it to the process, and set the BPF...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: BPF: Reject sleepable BPFLSMCGROUP programs at load time The cgroup shim runs under rcureadlockdontmigrate, so we should not attach any sleepable BPF programs there. Add support to the verifier to explicitly reject attempts to lo...
CVE-2026-32558: Incorrect Privilege Assignment
Unauthenticated Privilege Escalation in Affiliate Pro - Affiliate Program for WooCommerce & WordPress = 8.9.1 versions...
SUSE-SU-2026:3685-1 Security update for util-linux
This update for util-linux fixes the following issues: - CVE-2026-13595: heap use-after-free read in libblkid nested partition probing bsc1269583. - CVE-2026-27456: TOCTOU race condition in the mount program when setting up loop devices bsc1261606. - Several security issues in releases prior to...
diaphora v3.4.2
δiaphora Installation Install with the Hex-Rays plugin manager: root@kitploit: hcli plugin install https://github.com/joxeankoret/diaphora/archive/refs/tags/3.4.2.zip Manual install instructions are below. Diaphora διαφορά, Greek for 'difference' version 3.4 is the most advanced program diffing...
Benchmarking Automated Security Patch Backporting: How Far Are We?
Automated security patch backporting is critical for mitigating N-day vulnerabilities. Recent tools report success rates above 80% on their respective datasets. However, these evaluations are often confined to homogeneous environments, such as one repository or specific project versions...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101985)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101985 advisory. In the Linux kernel, the following vulnerability has been resolved: perf: Fix perfeventoverflow vs perfremovefromcontext race Make sure that perfeventoverflow runs...
