Linux Distros Unpatched Vulnerability : CVE-2026-76218

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation. Attackers can supply a...

CVE-2026-76220

GitPython before 3.1.58 contains a command execution vulnerability in...

PT-2026-79123

Dockge validates a stack name only on the write path. In backend/stack.ts the allow-list check in validate, which requires the name to match ^a-z0-9 -+$, is reached from save alone, while the path getter returns path.jointhis.server.stacksDir, this.name and Stack.getStack builds...

PT-2026-80215

Summary go.opentelemetry.io/otel/bridge/opentracing introduced an unsynchronized extraBaggageItems map on bridgeSpan. One goroutine can write this map through Span.SetBaggageItem while another goroutine reads and iterates it during correlation baggage propagation, which can trigger Go's fatal...

PT-2026-80272

Impact Pipelines-as-Code installations using the GitHub App provider are vulnerable to GitHub App credential exfiltration through the webhook endpoint. Affected versions accepted the X-GitHub-Enterprise-Host request header as the GitHub Enterprise API host during GitHub App token generation. For...

PT-2026-80743

Name of the Vulnerable Software and Affected Versions Pipelines-as-Code versions prior to 0.48.0 Description Installations using the GitHub App provider are susceptible to credential exfiltration via the webhook endpoint. The system accepted the X-GitHub-Enterprise-Host request header as the API...

Security update for forgejo-cli (important)

openSUSE security update: security update for forgejo-cli ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21605-1 Rating: important References: bsc1242683 bsc1248047 bsc1274529 Cross-References: CVE-2025-3416 CVE-2025-55159 CVE-2026-25541 CVSS score...

ALSA-2026:57251 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 CVE-2026-4323...

Linux Distros Unpatched Vulnerability : CVE-2026-76220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython before 3.1.58 contains a command execution vulnerability in the checkunsafeoptions guard that can be bypassed by combining a single-character kwarg wi...

NSEC3-X

DISCLAIMER: Questo progetto è stato generato da Intelligenza Artificiale AI ma ha subito un rigoroso processo "Human-in-the-Loop" HITL. Ciò significa che il codice è stato revisionato e rifattorizzato da un ingegnere del software umano, la progettazione architetturale è stata diretta dall'uomo, e...

cve-2026-41940-PoC

CVE-2026-41940 ⚠ تم إنشاء هذه الأداة للأغراض التعليمية أو مكافآت الثغرات فقط. الاستخدام غير المصرح به خارج البيئات الخاضعة للتحكم محظور تمامًا. الوصف أداة لاستغلال CVE-2026-41940، وهو ثغرة تجاوز مصادقة حرجة في cPanel وWHM بدرجة CVSS 10.0، تتيح للمهاجمين غير المصادق عليهم الحصول على وصول بصلاحيات...

SNet

SNet 日本語版はこちら / Versione giapponese Un CTF dove usi l'AI per catturare la bandiera. Nessuna esperienza di pentesting? Nessun problema. Claude Code funge da tuo personal trainer — configura l'ambiente, ti insegna gli strumenti e ti guida attraverso tecniche di attacco reali passo dopo passo. Scriv...

ggshield v1.54.0-rc1

ggshield: protect your code with GitGuardian ggshield is a CLI application that runs in your local environment or in a CI environment to help you detect more than 500+ types of secrets. ggshield uses our public API through py-gitguardian to scan and detect potential vulnerabilities in files and...

apache-cve-2021-41773-lab

Lab di Path Traversal Apache 2.4.49 — CVE-2021-41773 Clonazione root@kitploit: git clone https://github.com/zubairahm3d/apache-cve-2021-41773-lab.git cd apache-cve-2021-41773-lab chmod +x apachelab.sh Utilizzo Avvia il server vulnerabile: root@kitploit: ./apachelab.sh choose option 1 Exploit...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership 🔴 Panoramica della Vulnerabilità CVE-2026-1492 — Escalation dei Privilegi Non Autenticata tramite la Registrazione alla Membership Descrizione: Il plugin User...

CVE-2025-53580

CVE-2025-53580 WordPress Simple Business Directory Pro Plugin 15.6.9 é vulnerável a uma escalada de privilégios de alta prioridade CVE-2025-53580 Simple Business Directory Pro — Atribuição Incorreta de Privilégio → Redefinição de Senha → Assunção de Administrador root@kitploit: / | |// / / / | | ...

CVE-2025-49901

CVE-2025-49901 O Plugin Simple Link Directory do WordPress 14.8.1 é vulnerável a uma Quebra de Autenticação de alta prioridade root@kitploit: ╔═══════════════════════════════════════════════════════════════════╗ ║ CVE-2025-49901 · Simple Link Directory · qc-opd ║ ║ Authentication Bypass → Passwor...

CVE-2025-14364

CVE-2025-14364 Demo Importer Plus Da Subscriber autenticato ad Amministratore tramite l'azione AJAXdo-reinstall 〔 1 〕 Vulnerabilità Causa principale: Ajax::handlerequest registra l'azione AJAX demoimporterplus senza chiamare currentusercan. Qualsiasi subscriber autenticato può inviare...

CVE-2026-4484

CVE-2026-4484 Masteriyo LMS = 2.1.6 - Autorização Ausente para Escalação de Privilégios Autenticada Aluno+ para Administrador 🔴 Visão Geral da Vulnerabilidade CVE-2026-4484 — Escalação de Privilégios Autenticada Aluno → Administrador Descrição: O plugin Masteriyo LMS para WordPress é vulnerável a...

CVE-2026-1937

🔴 Panoramica della Vulnerabilità CVE-2026-1937 — Autorizzazione Mancante → Aggiornamento Arbitrario delle Opzioni → Escalation dei Privilegi Descrizione: Il plugin YayMail – WooCommerce Email Customizer per WordPress è vulnerabile a una modifica non autorizzata dei dati che porta a un'Escalation...