cve-2026-1668-poc

Proof-of-concept exploit for CVE-2026-1668 This is a proof-of-concept exploit for CVE-2026-1668. It is intended purely for educational purposes only. Please do not attempt to exploit systems that you do not own or do not have explicit permission to exploit. This proof-of-concept was developed...

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains ccTLDs and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh Ghana, .sl Sierra Leone or .as American Samoa was put at risk...

data-generation-tool (>=1.0.1, <=1.1.1), openrlhf (>=0.4.0, <=0.4.2) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.3)

transformers PYPI version 4.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - data-generation-tool =1.0.1, =0.4.0, =0.0.1, =0.1.1, =0.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:PYSEC-2026-3929...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-101982)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-101982 advisory. In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling i...

data-generation-tool (>=1.0.1, <=1.1.1), openrlhf (>=0.4.0, <=0.4.2) +2 more potentially affected by CVE-2026-9856 via transformers (4.43.3)

transformers PYPI version 4.43.3 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - data-generation-tool =1.0.1, =0.4.0, =0.0.1, =0.1.1, =0.2.1 Source cves: CVE-2026-9856 Source advisory: OSV:GHSA-XRQW-3RRV-VX5W...

CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

UBUNTU-CVE-2026-68580

FreeRDP before 3.29.0 contains integer overflow vulnerabilities in the audio input redirection channel audin across ALSA, sndio, WinMM, and OpenSL ES backends that fail to validate the FramesPerPacket parameter from RDP servers. Attackers can supply a malicious FramesPerPacket value causing...

Webbdesign SL-Studio - Local File Inclusion Detection

Webbdesign SL-Studio is vulnerable to local file inclusion. !/usr/bin/env python3 -- coding: utf-8 -- """Webbdesign SL-Studio is vulnerable to local file inclusion.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info =...

isofs: bound Rock Ridge symlink components to the SL record

...

UBUNTU-CVE-2026-64317

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

CVE-2026-64317

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

CVE-2026-64317 isofs: bound Rock Ridge symlink components to the SL record

In the Linux kernel, the following vulnerability has been resolved: isofs: bound Rock Ridge symlink components to the SL record getsymlinkchunk and the SL handling in parserockridgeinodeinternal walk the variable-length components of a Rock Ridge "SL" symbolic link record. Each component is a...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-55404 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-55404 Source advisory:...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-50574 Source advisory:...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-50023 Source advisory:...

Malicious code in sl-yh-out-abcxyz1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8634 Malicious code in sl-yh-out-abcxyz1 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-50574 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-50574 Source advisory:...

nts-everdrone (>=1.3.2, <=1.4.2), rythmix-dot-py (>=1.0.0, <=1.0.7) +3 more potentially affected by CVE-2026-50023 via yt-dlp (2024.7.25)

yt-dlp PYPI version 2024.7.25 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - nts-everdrone =1.3.2, =1.0.0, =0.0.1, =0.0.13 - yt-queue 0.10.3 - ytdl-sub 2024.7.26 Source cves: CVE-2026-50023 Source advisory:...

Malicious Package

Overview swplayer-react-sl is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...