108293 matches found
CVE-2026-68458 binder: cache secctx size before release zeroes it
In the Linux kernel, the following vulnerability has been resolved: binder: cache secctx size before release zeroes it bindertransaction bounds the scatter-gather buffer area with sgbufendoffset and subtracts the aligned LSM context size because the secctx is written at the tail of that area. The...
CVE-2026-68456 usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect()
In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect ueagle-atm uses the asynchronous requestfirmwarenowait in .probe, but does not wait for its completion, not even in .disconnect; so, if the device is unplugged...
CVE-2026-68455 liveupdate: validate session type before performing operation
In the Linux kernel, the following vulnerability has been resolved: liveupdate: validate session type before performing operation The sessions ioctls are not applicable to all session types. PRESERVEFD is only applicable to outgoing sessions. RETRIEVEFD and FINISH are only valid for incoming...
trufflehog v3.97.0
TruffleHog Find leaked credentials. 🔎 Now Scanning ...and more To learn more about TruffleHog and its features and capabilities, visit our product page. 🌐 TruffleHog Enterprise Are you interested in continuously monitoring Git, Jira, Slack, Confluence, Microsoft Teams, Sharepoint and more for...
tamago v1.26.6
TamaGo - bare metal Go tamago | https://github.com/usbarmory/tamago Copyright c The TamaGo Authors. All Rights Reserved. Introduction TamaGo is a framework that enables compilation and execution of unencumbered Go applications on bare metal processors AMD64, ARM, ARM64, RISCV64. The projects spaw...
GPEWebDefender
GPEWebDefender A web-attack monitor. It sits next to ngin...
ja4 v1.0.0
JA4+™ Network Fingerprinting JA4+ is a suite of network fingerprinting methods by FoxIO that are easy to use and easy to share. These methods are both human and machine readable to facilitate more effective threat-hunting and analysis. The use-cases for these fingerprints include scanning for...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: nri-f5, envoy-ai-gateway, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, steampipe, crossplane-function-environment-configs, octo-sts, harbor-registry, spark-operator-fips, ghaudit,...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: envoy-ai-gateway, crossplane-provider-aws-kinesisvideo, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-dsql, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, crossplane-provider-azure-servicefabric,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: nri-f5, envoy-ai-gateway, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, steampipe, crossplane-function-environment-configs, octo-sts, harbor-registry, spark-operator-fips, ghaudit,...
GHSA-7QCH-W8M5-G3H3 vulnerabilities
Vulnerabilities for packages: nri-f5, envoy-ai-gateway, crossplane-provider-aws-route53recoverycontrolconfig, crossplane-provider-aws-kendra, crossplane-provider-aws-kinesisanalytics-fips, steampipe, crossplane-function-environment-configs, octo-sts, harbor-registry, spark-operator-fips, ghaudit,...
GHSA-7QCH-W8M5-G3H3 vulnerabilities
Vulnerabilities for packages: nri-elasticsearch, stern, hubble-ui, controller-gen, vexctl, mountpoint-s3-csi-driver, gitlab-runner, datadog-agent, openfga, kserve, amass, postgres-operator, nri-consul, yunikorn-web, ip-masq-agent, vcluster, kubernetes-dashboard-api, eksctl,...
GHSA-XPHW-4F88-5F39 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-kms, crossplane-provider-family-aws, azure-service-operator, flux, gitleaks, zarf, flux-image-automation-controller, step-kms-plugin, vault-secrets-webhook, authservice, knative-operator, pgpool2exporter, karma, php-fpmexporter, hubble-ui,...
GHSA-25MV-J2QR-V5JQ vulnerabilities
Vulnerabilities for packages: nri-elasticsearch, stern, hubble-ui, controller-gen, vexctl, mountpoint-s3-csi-driver, gitlab-runner, openfga, kserve, amass, postgres-operator, nri-consul, ip-masq-agent, vcluster, kubernetes-dashboard-api, eksctl, external-secrets-operator, rclone, helm-set-status,...
GHSA-XC2P-8GGW-6CR5 vulnerabilities
Vulnerabilities for packages: nri-elasticsearch, stern, hubble-ui, controller-gen, vexctl, mountpoint-s3-csi-driver, gitlab-runner, datadog-agent, openfga, kserve, amass, postgres-operator, nri-consul, yunikorn-web, ip-masq-agent, vcluster, kubernetes-dashboard-api, eksctl,...
aquila-graph-poc
Aquila Graph POC A reproducible proof of concept for combinin...
Libvirt: information disclosure via world-readable storage volume images during clone/convert
...
PT-2026-72773
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix NMI/tracepoint re-entry deadlock on lru locks NMI and tracepoint BPF programs can re-enter the per-CPU or global LRU lock that bpf lru pop free/push free already hold on the same CPU, AA-deadlocking. Lockdep reports...
Linux Distros Unpatched Vulnerability : CVE-2026-72252
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfilter: nftsetpipapo: don't leak bad clone into future transaction On memory allocation failure the cloned nftpipapomatch can enter a bad state: - some field...
Linux Distros Unpatched Vulnerability : CVE-2026-74576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/slab: prevent unbounded recursion in free path with new kmalloc type Commit 280ea9c3154b mm/slab: avoid allocating slabobjext array from its own slab avoided...