DEBIAN-CVE-2026-80789

In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: bound SGL data length before allocating command buffers nvmettcpmapdata reads the host-controlled 32-bit sgl-length and, for the in-capsule offset descriptor type 0x01, checks it against port-inlinedatasize before use...

DEBIAN-CVE-2026-80786

In the Linux kernel, the following vulnerability has been resolved: fbdev: Wrap user-invoked calls to fbsetvar in helper Handle fbcon during display updates in fbsetvarfromuser. Check with fbcon if the mode change is possible, update hardware state and finally update fbcon. Update all callers. On...

DEBIAN-CVE-2026-80785

In the Linux kernel, the following vulnerability has been resolved: fbdev: serialize mode sysfs access with lockfbinfo showmode, showmodes, and storemode access fbinfo-modelist and fbinfo-mode without holding lockfbinfo. storemodes takes lockfbinfo while replacing the modelist and freeing the old...

DEBIAN-CVE-2026-80773

In the Linux kernel, the following vulnerability has been resolved: HID: huawei: fix missing hidisusb check tousbinterface can only be used on a hiddevice whose parent is really USB; uhid can create devices that identify as being on BUSUSB, but don't actually have a USB parent. Fix the use of...

DEBIAN-CVE-2026-80763

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcievent: validate LE Set CIG Parameters response The Command Complete dispatch validates only the fixed part of the LE Set CIG Parameters response. After that part is pulled from the skb, hcicclesetcigparams trusts...

DEBIAN-CVE-2026-80761

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: zero the sockaddr before returning it in getname isosockgetname fills a struct sockaddriso in place and returns its size without clearing it first, so bytes it does not write are copied to user space from the kern...

DEBIAN-CVE-2026-80765

In the Linux kernel, the following vulnerability has been resolved: HID: hyperv: validate initial device info bounds The Hyper-V synthetic HID host supplies SYNTHHIDINITIALDEVICEINFO messages that contain a HID descriptor followed by the report descriptor bytes. mousevsconreceivedeviceinfo trusts...

DEBIAN-CVE-2026-80762

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcisync: Fix accept list UAF during suspend hciupdateeventfiltersync walks hdev-acceptlist while sending a synchronous HCI command for each remote-wakeup device. The suspend path holds hdev-reqlock, but accept-list...

DEBIAN-CVE-2026-80759

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hciaml: validate firmware segment lengths amldownloadfirmware reads two lengths from the firmware header and uses them to build pointers before checking that the header and segment data are present. A truncated or...

DEBIAN-CVE-2026-80758

In the Linux kernel, the following vulnerability has been resolved: futex: Avoid private hash use-after-free on final put futexprivatehashput drops the reference to fph before evaluating fph-mm for wakeupvar. futexrefput enables preemption again before returning. If that put drops the final...

bx2-writeups

Security Writeups A collection of my cybersecurity writeups covering: TryHackMe Hack The Box Linux Privilege Escalation AI & Infrastructure Security CTFs Security Challenges Author: Nanashi Bx2...

CVE-2026-85696

creationtimestamp| type| source ---|---|--- 2026-09-04 16:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mupdjylwg62e 2026-09-04 16:08:56+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mupdy66dlr2v 2026-09-04 16:30:14+00:00| seen|...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.9-0.6.hum1 aarch64, x8664 grafana12.4-12.4.9-0.6.hum1.src src Security Fixes: grafana12.4: CVE-2026-84292 CVE-2026-84394...

revera

Revera The credit score for npm packages. Revera helps you decide whether a package is worth installing before you run npm install. It analyzes package quality, maintenance, security, ecosystem health, and publisher trust — and now propagates risk transitively across your entire dependency graph ...

bordair-detector

Bordair Detector A two-stage detector for prompt injection and jailbreak attempts in LLM inputs. A regex gate settles the easy majority of traffic without touching the model; anything ambiguous falls through to a quantised DeBERTa-v3 classifier running in ONNX. The same engine covers image,...

CVE-2022-40684

This repository does not have a README...

SecureCivic

SecureCivic SecureCivic is a citizen-built, open source identity verification platform designed to enable the Social Security Administration SSA to adopt a modern, privacy-first verification system. It removes reliance on private data brokers and middlemen by enabling secure, real-time identity...

CVE-2022-1015

Meungmeung is a fool...

Orbit Tracer

Orbit Tracer Orbit Tracer Security Agent for Intelligent Security Remediation Automate security vulnerability analysis, risk assessment, and remediation across your entire codebase using AI and Orbit's knowledge graph The Problem Security teams face a critical challenge: Finding vulnerabilities i...

CVE-2026-85693

Chatbot UI (open-source chat application) contains an authorization bypass in its retrieval endpoint (/api/retrieval/retrieve). The root cause is a service-role Supabase client that bypasses row-level security and fails to validate file ownership, allowing any authenticated user to retrieve index...