PT-2026-79450

Name of the Vulnerable Software and Affected Versions GeoTools versions 30.5 through 33.5 GeoTools version 34.4 Description An SQL injection flaw exists when executing OGC Filters with the PostGIS DataStore implementation. The issue occurs within the jsonArrayContains function, which fails to...

VulnCheck KEV: CVE-2026-76904

GeoTools is an open source Java library that provides tools for geospatial data. Starting in version 30.5 and prior to versions 33.6, 34.5, and 33.6, an SQL Injection Vulnerability is present when executing OGC Filters with PostGIS DataStore implementation: jsonArrayContains function; Requires...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.4.3. Vulnerability Details CVEID:CVE-2026-71557 DESCRIPTION: go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized befor...

THM-Steel_Mountain-CVE-2014-6287

THM-SteelMountain-CVE-2014-6287 Un write up sulla macchina Steel Mountain di TryHackMe.com e exploit per CVE-2014-6287 Crediti Non prendo alcun credito per la scoperta e lo sfruttamento originali di questa vulnerabilità. Grazie alle seguenti persone! Scoperta: Daniele Linguaglossa Autore del modu...

CVE-2026-74439

A flaw was found in the Linux kernel's Input/Output Memory Management Unit IOMMU subsystem. The devicepasidtableteardown function incorrectly clears a scalable-mode context entry while its 'Present' bit remains set. This creates a window where the hardware can access a partially cleared entry,...

CVE-2026-74438

A flaw was found in the Linux kernel's sun4i-ss cryptographic random number generator RNG. This component contains multiple vulnerabilities, including a buffer overflow in the sun4issprngseed function that could lead to a denial of service. Furthermore, the sun4issprnggenerate function may not...

CVE-2026-74435

A flaw was found in the rxrpc subsystem of the Linux kernel. This vulnerability occurs when the rxrpcverifydata function fails to allocate a necessary buffer if the incoming data length is zero. An attacker could exploit this by sending specially crafted network packets, leading to a NULL pointer...

CVE-2026-74434

A flaw was found in the Linux kernel's rxrpc subsystem. When an out-of-band OOB message is read using the MSGPEEK flag in the rxrpcrecvmsgoob function, the message is incorrectly left on one queue while also being added to another. This can lead to the message being freed twice when the socket is...

CVE-2026-74432

A flaw was found in the rxrpc component of the Linux kernel. When the recvmsg function is called with the MSGPEEK flag, it fails to properly release a reference to an already-released call. This oversight can lead to a memory leak, potentially allowing a local attacker to cause a Denial of Servic...

CVE-2026-74431

A flaw was found in the Linux kernel's rxrpc network protocol implementation. This vulnerability could allow an attacker to trigger an infinite loop within the rxrpcrecvmsg function by manipulating out-of-band OOB queue handling. This could lead to a Denial of Service DoS condition, making the...

CVE-2026-74428

A flaw was found in the Linux kernel's rxrpc subsystem. A double unlock vulnerability in the rxrpcrecvmsg function, when processing out-of-band OOB messages, could allow a remote attacker to cause a system crash. This issue leads to a Denial of Service DoS condition...

CVE-2026-74423

A flaw was found in the Linux kernel's accel/amdxdna component. This vulnerability occurs when the pinuserpagesfast function, responsible for pinning user buffer ubuf pages, returns fewer pages than requested. In such cases, the pages that were successfully pinned are not properly released, leadi...

CVE-2026-74396

A flaw was found in the Linux kernel's RDMA/mlx5 component. When the mlx5odppopulatexlt function encounters an error, it fails to properly clean up allocated resources. This can lead to a memory leak of the XLT DMA mapping and buffer. Additionally, if an emergency XLT page was used, a mutex could...

CVE-2026-74410

A flaw was found in the Linux kernel's rtw88 wifi driver. An attacker able to control firmware RX descriptors could cause an out-of-bounds read from the pre-allocated Direct Memory Access DMA buffer. This occurs because the newlen calculation in the rtwpcirxnapi function does not properly validat...

CVE-2026-74393

A flaw was found in the Linux kernel's drm/syncobj component. The drmsyncobjfindfence function fails to properly release a reference to a syncobj object, which is acquired by drmsyncobjfind. This oversight leads to a memory leak. A local attacker could exploit this vulnerability to consume system...

CVE-2026-74408

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This vulnerability arises from an out-of-bounds memory access within the athtxedmatasklet function. An internal queue identifier, which is a 4-bit hardware field, can exceed the bounds of the transmit queue array. This can lead to memory...

CVE-2026-67447

Mailpit is an email testing tool and API for developers. From 1.30.0 until 1.30.5, Mailpit's internal/smtpd/smtpd.go readData function calls bufio.Reader.ReadBytes before applying the lendata+lenline size check to the completed SMTP DATA line against Server.MaxSize. An unauthenticated SMTP client...

CVE-2026-74417

A flaw was found in the Linux kernel's drm/radeon component. An integer overflow vulnerability exists in the radeonalignpitch function. This flaw occurs when calculating memory alignment and pitch, where large values can cause the calculations to wrap around. If exploited, this could lead to the...

CVE-2026-74404

A flaw was found in the Linux kernel's crypto: ccp component. An off-by-one error in the snpfilterreservedmemregions function can lead to a heap buffer overflow. This vulnerability could allow an attacker to corrupt memory, potentially leading to a denial of service or arbitrary code execution...

CVE-2026-55769

CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser connections without pinning searchpath in fillDefaultParameters in pkg/management/postgres/pool/profiles.go. A role holding DATABASE OWNER...