CVE-2023-3350

CVE-2023-3349 / CVE-2023-3350 | IBERMATICA RPS 2019 Security research documenting an unauthenticated information disclosure and a cryptographic design flaw in IBERMATICA RPS 2019. The vulnerabilities can be chained to expose application logs containing authentication-related SQL queries and recov...

CVE-2024-50492

🚨 CVE-2024-50492 - Exploit RCE para ScottCart 🔥 Script de Exploit para ScottCart 🧑‍💻 Por Nxploit – Khaled Alenazi 📌 Descripción El plugin ScottCart para WordPress versiones ≤ 1.1 es vulnerable a Ejecución Remota de Código RCE. Esto permite a atacantes no autenticados ejecutar funciones PHP...

[SECURITY] Fedora 45 Update: libevent-2.1.13-1.fc45

The libevent API provides a mechanism to execute a callback function when a specific event occurs on a file descriptor or after a timeout has been reached. libevent is meant to replace the asynchronous event loop found in event driven network servers. An application just needs to call eventdispat...

CVE-2026-89607

A flaw was found in ecryptfs in the Linux kernel. The parsetag3packet function does not properly validate the size of the encrypted key, allowing an oversized key to be processed. This improper validation leads to out-of-bounds writes, corrupting critical data structures within the ecryptfsauthto...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

CVE-2026-89487

A flaw was found in openvswitch in the Linux kernel. This vulnerability occurs when the queueuserspacepacket function incorrectly modifies a shared network packet buffer by stripping a critical flag. This action can lead to an unprivileged page-cache write, allowing a local attacker to modify dat...

CVE-2026-80954

A flaw was found in the Linux kernel's i3c driver. The i3cdevicegetsupportedxfermode function attempts to access a device descriptor without holding the necessary lock. This unlocked dereference can lead to memory corruption, potentially causing system instability or a denial of service...

CVE-2026-89668

A flaw was found in the nfsd component of the Linux kernel. The nfsddebugfsinit function is called before nfsd4initslabs. If the slab allocation fails, the nfsddebugfsexit cleanup function is bypassed, leaving orphaned debugfs files with stale function pointers. This can lead to a use-after-free...

CVE-2026-80941

A flaw was found in the rtw88 Wi-Fi driver of the Linux kernel. This issue occurs because the rtwtxqpushskb function fails to free a socket buffer skb when an error occurs during transmission. This oversight can lead to a memory leak, potentially impacting system stability and performance over ti...

Exploit for Improper Input Validation in N8N

🛡️ AI Security Tool Module n8n Full C...

CVE-2025-47810

PunkBuster LPI CVE-2025-47810 Antecedentes PunkBuster se instala como dos servicios y un controlador de kernel opcional? PnkBstrA: Servicio que se ejecuta constantemente en segundo plano y se encarga de gestionar PunkBuster en su conjunto PnkBstrB: Servicio que se inicia cuando comienza un juego...

PT-2026-90722

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub 11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and...

PT-2026-90565

The Yogeta WP Cloud WordPress plugin through 1.0 does not validate a user-supplied file path before passing it to a file-read function on a public endpoint that lacks any authorization check, allowing unauthenticated attackers to download arbitrary files from the server, including files containin...

PT-2026-90727

A vulnerability was determined in Xuxueli xxl-job up to 3.4.2. This affects the function GroovyClassLoader.parseClass of the file xxl-job-core/src/main/java/com/xxl/job/core/glue/GlueFactory.java. This manipulation causes code injection. Remote exploitation of the attack is possible. The exploit...

PT-2026-90596

🚨 CVE-2026-78006 The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is safe widget instance function. This is due to insufficient protection in is safe widget instance, which can be bypassed because PHP fires...

Linux Distros Unpatched Vulnerability : CVE-2026-81008

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - interconnect: Fix use after free in iccget and oficcgetbyindex In oficcgetbyindex and iccget, if the dynamic allocation for path-name fails via kasprintf, the...

Linux Distros Unpatched Vulnerability : CVE-2026-89767

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ovl: fix double endcreating on the casefold-mismatch path ovlcreatereal releases the new dentry twice when the casefold consistency check fails. The SIFDIR...

Linux Distros Unpatched Vulnerability : CVE-2026-89674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix XDR length calculation in nfsd4ffencodelayoutget The XDR buffer size calculation in nfsd4ffencodelayoutget has multiple errors that can result in eith...

Linux Distros Unpatched Vulnerability : CVE-2026-89493

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: validate rlused against rlcount in refcount block validator ocfs2findrefcountrecinrl walks the on-disk refcount record array with: for ; i...

Linux Distros Unpatched Vulnerability : CVE-2026-89561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled...