morty

Morty 作为服务的Web内容净化代理 Morty 重写网页以排除恶意 HTML 标签和属性。它还会替换外部资源引用以防止第三方信息泄露。 Morty 的主要目标是作为 searx 的结果代理提供，但它也可以作为独立的净化服务使用。 特性： HTML 净化 将 HTML/CSS 外部引用重写为本地引用 阻止 JavaScript 不转发 Cookie 不发送 Referer 无缓存/ETag 支持 GET/POST 表单和 IFrame 可选的 HMAC URL 验证密钥以防止服务滥用 安装和设置 要求：Go 版本 1.10 或更高。 root@kitploit: $ go get...

EUVD-2026-86923

In the Linux kernel, the following vulnerability has been resolved: ASoC: fslmicfil: balance mclk enable/disable hwparams enables mclk unconditionally and hwfree disables it unconditionally, but the PCM core does not guarantee 1:1 pairing: hwfree can run without hwparams, and hwparams can be call...

CVE-2026-98068

The Linux kernel contains a race condition in the RDS (Reliable Datagram Sockets) protocol. Specifically, the rds_conn_shutdown() function could prematurely consume an RDS_CONN_ERROR state caused by a concurrent drop. This occurs when rds_tcp_accept_one() attaches a new socket; if a concurrent dr...

EUVD-2026-86738

In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf: Put device on unsupported feature error Route unsupported provisioned features through the common error path after vdpaallocdevice so the allocated device and adapter pointer are released consistently...

ROS-20260925-73-0129

The vulnerability in the kernel-lt is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability allows a remote attacker to cause service interruptions through specially created IPv6 traffic...

DEBIAN-CVE-2026-97436

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: rework FDB management on the bridge leave path On bridge leave, the dpaa2switchportsetfdb function always allocates a new FDB for the port which is becoming standalone. In case no FDB is found, then the port leaving...

kernel: af_unix: Drop all SCM attributes for SOCKMAP

A flaw was found in the Linux kernel's afunix component, specifically within its SOCKMAP feature. This vulnerability stems from the kernel's improper handling of Socket Control Message SCM attributes when data is passed to the SOCKMAP layer. This can lead to a use-after-free condition, which may...

CVE-2026-93225

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95usbphygettca succeeds, the typec switch leaks because the only cleanup path was in .remove, which never runs on probe failure. Use...

CVE-2026-97504

The Linux kernel contains a vulnerability in the lenovo_se10_wdt watchdog driver. The issue involves a use-after-free risk and a potential resource leak where the se10_pdev pointer was not properly handled. To address this, the driver was updated to set se10_pdev to null to prevent use-after-free...

EUVD-2026-86102

In the Linux kernel, the following vulnerability has been resolved: watchdog: lenovose10wdt: Fix use-after-free and resource leak risk Review by sashiko.dev highlighted potential use after free and resource leak instances. Set se10pdev to null to prevent use after free Remove DMI call back and...

CVE-2026-97436

In the Linux kernel , the dpaa2-switch component contains a logic flaw in how FDB management is handled on the bridge leave path. When a port leaves a bridge, the dpaa2_switch_port_set_fdb() function incorrectly allocates new FDBs without properly marking old ones as unused. This is particularly ...

kernel: af_unix: Drop all SCM attributes for SOCKMAP

A flaw was found in the Linux kernel's afunix component, specifically within its SOCKMAP feature. This vulnerability stems from the kernel's improper handling of Socket Control Message SCM attributes when data is passed to the SOCKMAP layer. This can lead to a use-after-free condition, which may...

CVE-2026-93136

A flaw was found in the Linux kernel's Mobile Host Interface MHI endpoint driver. An issue in the error handling path during MHI device creation can lead to a resource leak. Specifically, if certain device setup operations fail, not all allocated device references are properly released. This can...

CVE-2026-93130

A flaw was found in the Linux kernel's dell-wmi-base module, which handles system management functions for Dell hardware. This vulnerability is a resource leak, meaning that system resources are not properly released after use. When the dell-wmi-base module fails to load, it does not correctly...

CVE-2026-93116

A flaw was found in the asus-wmi driver of the Linux kernel. During driver initialization, an error handling issue can lead to resource leaks. This occurs because cleanup calls for previously registered subsystems are bypassed when certain initialization functions fail. A local attacker could...

CVE-2026-93072

A flaw was found in the Linux kernel's irqchip/renesas-irqc driver. When the driver is removed, generic interrupt chips are not properly freed, leading to a resource leak. This can result in a use-after-free vulnerability, where a local attacker could potentially trigger a kernel crash...

CVE-2026-92524

A flaw was found in the Linux kernel's irqchip/gic-v3-its component. A resource leak occurs when the itsirqgicdomainalloc function fails to properly deallocate resources during error handling. This can lead to a denial of service DoS due to excessive memory consumption...

CVE-2026-90119

A flaw was found in the Linux kernel's ALSA Advanced Linux Sound Architecture ice1712 component. This vulnerability occurs when the sndice1712probe function, responsible for initializing the sound card, encounters an error. During such failures, the system does not properly release allocated ALSA...

CVE-2026-89886

A flaw was found in the Intel IPU6 media driver within the Linux kernel. This vulnerability occurs when the driver fails to properly clean up resources during an error in processing device connections. An attacker could potentially exploit this by triggering a specific error condition, leading to...

CVE-2026-89872

A flaw was found in the Linux kernel's v4l2-fwnode media subsystem. A local attacker or a malicious application could exploit this by failing to properly release a fwnode reference in the v4l2fwnodeparselink function. This resource leak could lead to system instability or a denial of service DoS,...