kalitorify

Transparent Proxy through Tor for Kali Linux About kalitorify kalitorify is a shell script for Kali Linux which use iptables settings to create a Transparent Proxy through the Tor Network , the program also allows you to perform various checks like checking the Tor Exit Node i.e. your public IP...

CVE-2026-25643

Frigate NVR ≤ 0.16.3 Blind RCE Exploit CVE-2026-25643 PoC 📜 Description This Python exploit targets a critical configuration manipulation vulnerability in Frigate NVR versions up to 0.16.3 both authenticated and unauthenticated paths. By injecting a malicious go2rtc stream and a fake camera entry...

MariaDB 10.6.0 < 10.6.28/ 10.11.0 < 10.11.19/ 11.4.0 < 11.4.13/ 11.8.0 < 11.8.9/ 12.3.0 < 12.3.3/ 13.0.0 < 13.0.2

The version of MariaDB installed on the remote host is prior to 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, 13.0.2. It is, therefore, affected by a vulnerability as referenced in the GHSA-mhvc-vqcq-7vq5 advisory. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until...

mariadb: mariadb: Privilege escalation via environment variable injection during service restart

A flaw was found in MariaDB. An authenticated database user with file write permissions can create an unauthorized configuration file in the service runtime directory. During a subsequent service restart, the service unit loads this file and injects attacker-controlled environment variables into...

PT-2026-115923

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

PT-2026-115911

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

mariadb: mariadb: Privilege escalation via environment variable injection during service restart

A flaw was found in MariaDB. An authenticated database user with file write permissions can create an unauthorized configuration file in the service runtime directory. During a subsequent service restart, the service unit loads this file and injects attacker-controlled environment variables into...

[SECURITY] [DLA 4834-2] keystone regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4834-2 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès October 14, 2026 https://wiki.debian.org/LTS -...

Linux Distros Unpatched Vulnerability : CVE-2026-107818

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit...

DEBIAN-CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-107818

MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the mariadb.service unit used /run/mysqld/wsrep-new-cluster during the next service restart. A database user with FILE privilege and a secure-file-priv...

CVE-2026-107811

Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, ordinary authenticated users can access /api/nodes and /api/nodes/:id, whose responses serialize the node token field. The same token is accepted as X-Node-Secret by AuthRequired and maps the request to initUser,...

CVE-2026-75607 Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations

Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without checking the authenticated user's role because the nginx authentication subrequest does not provide role-aware...

CVE-2026-75607

Frigate is an open source network video recorder (NVR). In versions prior to 0.17.2 , the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without checking the authenticated user's role , because the nginx authentication subrequest does not prov...

CVE-2026-75607: Missing Authorization

Frigate is an open source network video recorder. Prior to 0.17.2, the WebSocket handler in frigate/comms/ws.py forwards attacker-selected message topics to the dispatcher without checking the authenticated user's role because the nginx authentication subrequest does not provide role-aware...

CVE-2026-19655

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

CVE-2026-19655 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

CVE-2026-19655 On affected platforms running Arista EOS with Dynamic Host Configuration Protocol (DHCP) relay/snooping configured with the information option (Option 82), or with the DHCP server configured with match criteria based on the information option, an unauthent

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...

EUVD-2026-80003

On affected platforms running Arista EOS with Dynamic Host Configuration Protocol DHCP relay/snooping configured with the information option Option 82, or with the DHCP server configured with match criteria based on the information option, an unauthenticated attacker connected to a client-facing...