The vulnerability of the nvmet_ctrl_free() function in the drivers/nvme/target/core.c module of the NVME kernel of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmetctrlfree function in the drivers/nvme/target/core.c module of the NVME driver for the Linux operating system is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a remote attacker to cause service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-80801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfc: microread: validate target discovery payload lengths microreadtargetdiscovered parses target discovery payloads from skb-data according to the HCI gate. Th...

MAL-2026-15861 Malicious code in py-1requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd6d1a5c78d4368dc76a90cc90a68e4264170ed9ef208c8096251798734bb0d6 py1requests is a typosquat of the popular requests library leading 1 inserted inside the name. On import, py1requests/init.py iterates os.environ and...

MAL-2026-15862 Malicious code in py-2equests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9bd7b93cf88d0fbcca30c50d9c9de6e14134cd2890be5a7a785e9330e98a988c py-2equests is a typosquat of the popular 'requests' package substituting '2' for 'r'. On import py2equests, the top-level module body iterates...

Malicious code in 0requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3a594da2523b6481bd4639f5d3aaed9ec11a9adf92c2b99bf99d0ab6fb5b78 The package name '0requests' is a one-character variant of the popular PyPI package 'requests'. On import of the top-level package, init.py enumerate...

MAL-2026-15859 Malicious code in 0requests (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ce3a594da2523b6481bd4639f5d3aaed9ec11a9adf92c2b99bf99d0ab6fb5b78 The package name '0requests' is a one-character variant of the popular PyPI package 'requests'. On import of the top-level package, init.py enumerate...

CVE-2026-41940 — Updated!

root@kitploit: ░█████╗░██╗░░░██╗███████╗░░░░░░██████╗░░█████╗░██████╗░░█████╗░░░░░░░░░██╗██╗░░███╗░░░█████╗░░░██╗██╗░█████╗░ ██╔══██╗██║░░░██║██╔════╝░░░░░░╚════██╗██╔══██╗╚════██╗██╔═══╝░░░░░░░░██╔╝██║░████║░░██╔══██╗░██╔╝██║██╔══██╗...

SUSE CVE-2026-72416

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftcompat: ebtables emulation must reject non-bridge targets xtables targets return netfilter verdicts: NFACCEPT, NFDROP, and so on. ebtables targets return incompatible verdicts: EBTACCEPT, EBTDROP, ... We cannot allo...

Linux Distros Unpatched Vulnerability : CVE-2026-83616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and ...

CVE-2026-84367 joi: object().rename() with a template target can set the validated object's prototype

joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/types/keys.js internals.rename implementation used by object.rename permits a schema that renames keys with a regular-expression source and a Joi.expression or Joi.x target that...

CVE-2026-84367

joi (a JavaScript schema validator) is vulnerable to a limited prototype pollution via object().rename() in versions 16.0.0 through 17.13.4 and 18.2.3 . The root cause lies in internals.rename() in lib/types/keys.js: when a schema uses a regular-expression source combined with a Joi.expression() ...

CVE-2026-84367 joi: object().rename() with a template target can set the validated object's prototype

joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/types/keys.js internals.rename implementation used by object.rename permits a schema that renames keys with a regular-expression source and a Joi.expression or Joi.x target that...

CVE-2026-84367 joi: object().rename() with a template target can set the validated object's prototype

joi is a schema description language and data validator for JavaScript. From 16.0.0 until 17.13.5 and 18.2.4, joi's lib/types/keys.js internals.rename implementation used by object.rename permits a schema that renames keys with a regular-expression source and a Joi.expression or Joi.x target that...

DEBIAN-CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

AZL-99351 CVE-2026-83616 affecting package python-tensorboard 2.16.2-6

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

CVE-2026-83616

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

CVE-2026-83616

xmldom , a pure JavaScript W3C-standard XML DOM module, is affected by a Processing Instruction Target Injection vulnerability. In Document.createProcessingInstruction(target, data) within lib/dom.js, the target parameter is accepted without validation. The requireWellFormed: true serializer only...

CVE-2026-83616 xmldom: Processing Instruction Target Injection Bypasses requireWellFormed

xmldom is a pure JavaScript W3C standard-based XML DOM Level 2 Core DOMParser and XMLSerializer module. Prior to @xmldom/xmldom versions 0.8.15 and 0.9.12, and in xmldom version 0.6.0 and earlier, Document.createProcessingInstructiontarget, data in lib/dom.js accepts an unvalidated target, while...

CVE-2026-80691

A flaw was found in the Linux kernel's SCSI target iblock module. A missing null pointer check in the iblockexecuteprout function, specifically for the ops-prclear callback during PREEMPT and RELEASE operations, allows unimplemented hooks to be called. This can lead to dereferencing a null functi...