UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

SUSE CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

SUSE CVE-2026-59919

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's HAProxy encoder HAProxyMessageEncoder writes AFUNIX source and destination socket addresses into the HAProxy V1 text protocol without validating them for CRLF...

EUVD-2026-47859

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the sub186f4 function...

EUVD-2026-47860

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

EUVD-2026-47861

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

PT-2026-63578

Name of the Vulnerable Software and Affected Versions PortProtonQt versions prior to 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe Description An incorrect authorization issue allows any user to mount and unmount arbitrary file systems and modify network configurations through NetworkManager...

ROS-20260723-73-0038

The vulnerability in Chromium is related to errors in HTTP requests processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ROS-20260723-73-0017

The vulnerability in Chromium is related to errors in HTTP requests processing. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

ManageEngine AD360 Detection Tool

A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...

EUVD-2026-48432

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to escalate privileges via the kernel driver pgsecdl.sys...

CVE-2026-38764

An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to achieve privilege escalation . The vulnerability exists within the pgsecdl.sys kernel driver . While the technical root cause is not explicitly detailed in the provided documents, the issue allows for unauthor...

CVE-2026-59678: Incorrect Authorization

An Incorrect Authorization vulnerability in Linux-Gaming PortProtonQt allows any users to mount and unmount arbitrary file systems and modify the network configuration via NetworkManager. This issue affects PortProtonQt before 0d0f0950ebd948cdf82e8c3e1ebd2bcb9b8bafbe...

CVE-2026-8287: Allocation of Resources Without Limits or Throttling

Allocation of resources without limits or throttling vulnerability in BizimHesap Information Systems Industry and Trade Inc. Online Pre-Accounting Software allows Excessive Allocation. This issue affects Online Pre-Accounting Software: through 17072026...

CVE-2026-38763

An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service via the function sub13828...

CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15

CVE-2026-8458 affecting package cmake for versions less than 3.30.3-15. A patched version of the package is available...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: crossplane-provider-gcp-beta-container-fips, crossplane-provider-aws-configservice, crossplane-provider-family-gcp-config, crossplane-provider-aws-budgets, crossplane-provider-aws-datasync, crossplane-provider-aws-iot, crossplane-provider-aws-ecrpublic-fips,...

CVE-2026-59889 vulnerabilities

Vulnerabilities for packages: ruby3.2-jrjackson, akhq, wavefront-proxy, strimzi-kafka-operator, infinispan, flyway, tez, apache-tika, druid, thingsboard, opensearch, trino, confluent-kafka, keycloak, ruby3.3-jrjackson, zookeeper, apache-nifi, jenkins-plugin-manager, apache-nifi-registry,...

GHSA-C97M-VXHJ-P7J6 vulnerabilities

Vulnerabilities for packages: dagger, crossplane-provider-aws-sns, vale, crossplane-provider-azure-managedidentity, crossplane-provider-aws-iam, crossplane-provider-aws-dynamodb, crossplane-provider-aws-kms, crossplane-provider-aws-cloudfront, gptscript, crossplane-provider-aws-elasticache,...