PT-2026-90145

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails amd pmc probe registers the LPS0 s2idle handler with acpi register lps0 dev and creates the driver's debugfs directory before calling amd stb s2d init, which is...

PT-2026-90135

In the Linux kernel, the following vulnerability has been resolved: ipmi: si: Fix NULL pointer dereference after failed registration try smi init allocates new smi-si sm and later calls ipmi register smi mod, which maps to ipmi add smi. During ipmi add smi, the upper IPMI message handler obtains...

PT-2026-90122

In the Linux kernel, the following vulnerability has been resolved: net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer. Registration failures can also leave an error pointer in priv-ptp.clock...

PT-2026-90286

In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Make the MCE notifier per-region Flavien Solt reported lifetime issues with the CXL MCE notifier, which can lead to NULL dereferences and use-after-free in the MCE handler. The notifier was registered per memory device a...

PT-2026-90315

In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering display dsicm probe registers the display before initializing ddata-lock. Once omapdss register display publishes the display, another consumer can reach a dsicm...

Linux Distros Unpatched Vulnerability : CVE-2026-87090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another...

PT-2026-90136

In the Linux kernel, the following vulnerability has been resolved: ipmi: Remove all sysfs files on registration failure ipmi add smi creates the nr users and nr msgs files before trying to create the maintenance mode file. If that last creation fails, the error path removes only nr users before...

CVE-2026-45770 Suricata lua: excessive flow variable registration can bypass sandbox

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to version 8.0.5, a Lua rule that registers too many flow variables can corrupt Lua detection state and may bypass Suricata's restricted Lua...

CVE-2026-1529-PoC-keycloak-unauthorized-registration-via-improper-invitation-token-validation

CVE-2026-1529 Keycloak Exploit Tool Keycloak: Unauthorized organization registration via improper invitation token validation Disclaimer This tool is for educational and security testing purposes only. Use only on systems you have explicit permission to test. Unauthorized access to computer syste...

gh-hijack-runner

gh-hijack-runner A python script to create a fake GitHub runner and hijack pipeline jobs to leak CI/CD secrets. Discover more details in the following blogpost: https://www.synacktiv.com/publications/hijacking-github-runners-to-compromise-the-organization Exploitation If you can obtain a...

CVE-2025-12028

1 Start a simple HTTP server to host the proof-of-concept page root@kitploit: mkdir -p /tmp/attacker && cd /tmp/attacker php -S 127.0.0.1:8000 2 Create a file /tmp/attacker/poc.html with the following contents root@kitploit: document.getElementById'x'.submit;...

CVE-2026-87090

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

EUVD-2026-75679

Consul and Consul Enterprise are vulnerable to an authorization bypass in the catalog node-write path that may allow an authenticated attacker to delete another node's catalog registration and take over its node identity. An attacker with a token granting node-write permission on any single node...

CVE-2024-6624

CVE-2024-6624 | JSON API User = 3.9.3 - Escalada de Privilegios No Autenticada Este es un script de Python que explota la vulnerabilidad CVE-2024-6624 en el plugin JSON API User = 3.9.3 para WordPress. Esta herramienta permite a atacantes no autenticados registrar nuevos usuarios y escalar sus...

CVE-2026-1492

CVE-2026-1492 User Registration & Membership = 5.1.2 - Unauthenticated Privilege Escalation via Membership Registration 🔴 Vulnerability Overview CVE-2026-1492 — Unauthenticated Privilege Escalation via Membership Registration Description: The User Registration & Membership plugin for WordPress is...

EUVD-2026-75585

rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone serve s3 configured with --auth-proxy but without --auth-key allows authPairMiddleware to register any client-chosen accessKeyID with an empty ws.s3Secret. gofakes...

CVE-2026-87912 Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops

A missing S3 bucket ownership verification in the AWS Security Agent plugin in Amazon aws-agents-for-devsecops before 1.1.0 might allow remote attackers to obtain the private source archive of a scanned workspace, including credentials and infrastructure state contained in that archive, via a...

n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

Impact The OAuth Dynamic Client Registration endpoints validated field sizes only for redirecturis, leaving clientname and granttypes bounded by presence checks alone. An unauthenticated remote caller could submit arbitrarily large values in either field and have them persisted to the database...

NPM: n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint

NPM: n8n: Unauthenticated Persistent Storage Exhaustion via OAuth Dynamic Client Registration Endpoint vulnerability discovered by ? in WordPress Npm n8n versions 2.37.7...

wp-user-registration-vuln-checker

WordPress User Registration Checker for CVE-2026-1492 Read-only checker for owned WordPress sites that may be affected by CVE-2026-1492 in the User Registration & Membership plugin. It helps a site owner confirm plugin exposure and look for compromise indicators such as hidden administrator...