CVE-2026-87656

Improper state validation in Safebrowsing in Google Chrome prior to 15...

CVE-2026-87645

Improper state validation in Safebrowsing in Google Chrome prior to 15...

CVE-2026-12295-UXXS-in-my-wasm

CVE-2026-12295 — 非 about:srcdoc URI 上的 srcdoc 数据（Firefox UXSS） 概念验证：一个被攻破的内容进程伪造了一个 PDocumentChannel 加载，其 nsDocShellLoadState 携带 SrcdocData 以及一个任意的 URI。存在漏洞的构建版本会将攻击者的 HTML 作为文档提供给受害者源 ——同源读取 + 数据外泄（UXSS）。 目标：Firefox 149.0a1 nightly @ 2fbc0748c4（存在漏洞，修复前），macOS arm64。 已在 Firefox 152 中修复——bug...

CVE-2026-15460

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

CVE-2026-15460 Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

EUVD-2026-75212

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

CVE-2026-15460

CVE-2026-15460 affects Zephyr RTOS Bluetooth Classic (BR/EDR) L2CAP, specifically the receive handler bt_l2cap_br_recv() in subsys/bluetooth/host/classic/l2cap_br.c. The handler dispatched inbound data PDUs based solely on the destination channel ID without verifying the channel had reached BT_L2...

CVE-2026-15460 Missing channel-state validation in Zephyr Bluetooth Classic L2CAP receive path

The Bluetooth Classic BR/EDR L2CAP receive handler btl2capbrrecv in subsys/bluetooth/host/classic/l2capbr.c dispatched inbound data PDUs based only on the destination channel ID, without checking that the target channel had reached the BTL2CAPCONNECTED state. A dynamic channel is assigned its RX...

ReplicatedRandom

Node MWC1616 参见 node 文件夹中的 README Java LCG 给定一个由 java.util.Random 的 nextDouble 生成的 double，重建一个具有相同状态的 Random。这个 ReplicatedRandom 随后可用于预测原始 Random 的未来值。 示例： root@kitploit: Random r = new Random; ReplicatedRandom rr = new ReplicatedRandom; rr.replicateStater.nextDouble; System.out.printlnr.nextDoub...

Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: kube-state-metrics: kube-state-metrics-2.20.0-0.2.hum1 aarch64, x8664 kube-state-metrics-2.20.0-0.2.hum1.src src Security Fixes: kube-state-metrics: CVE-2026-71556...

CVE-2026-19598-PoC

CVE-2026-19598-PoC Proof of Concept for CVE-2026-19598 affecting Pods ⚠️ Security Research / Authorized Testing Only This repository contains a Proof of Concept for CVE-2026-19598. Affected Software WordPress Pods = 3.3.9 Vulnerability Unauthenticated privilege escalation. PoC The PoC demonstrates...

CVE-2026-87877

zstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes. Attackers can call these methods on closed streams to write through freed native pointers, corrupting unrelated objects or crashing the JVM...

CVE-2026-86768 Snipe-IT before 8.7.0 Improper Input Validation via API Checkout

Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targets. Attackers can submit POST requests to hardware, component, or consumable checkout endpoints with soft-deleted use...

CVE-2026-86768

Snipe-IT before 8.7.0 is affected by an improper input validation flaw in its API checkout endpoints. The product fails to validate the soft-deleted state of referenced objects, allowing any authenticated user with checkout permissions to submit POST requests to hardware, component, or consumable...

CVE-2026-86768 Snipe-IT before 8.7.0 Improper Input Validation via API Checkout

Snipe-IT before 8.7.0 fails to validate soft-deleted state in API checkout endpoints, allowing authenticated users with checkout permissions to bind live inventory to trashed targets. Attackers can submit POST requests to hardware, component, or consumable checkout endpoints with soft-deleted use...

CVE-2026-86203 PocketMine-MP before 5.39.2 Item Duplication via Despawn State

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203 PocketMine-MP before 5.39.2 Item Duplication via Despawn State

PocketMine-MP versions before 5.39.2 fail to validate entity despawn state when processing attack packets from clients. Attackers can exploit a race condition by attacking a disconnecting player to trigger multiple death handlers, causing inventory items and experience to drop multiple times for...

CVE-2026-86203

PocketMine-MP versions before 5.39.2 contain an item duplication vulnerability caused by a failure to validate entity despawn state when processing attack packets from clients. A race condition allows an attacker to attack a disconnecting player, triggering multiple death handlers that cause inve...

CVE-2026-79965

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...

EUVD-2026-74896

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized...