6335 matches found
CVE-2026-74676
CVE-2026-74676 affects the Linux kernel virtual terminal (VT) subsystem. The KDSKBMETA ioctl, which modifies keyboard meta mode, lacked the !perm permission check enforced by all other keyboard setter ioctls in vt_k_ioctl() . This allowed a process to change the meta mode on a non-controlling con...
EUVD-2026-64363
In the Linux kernel, the following vulnerability has been resolved: vt: add permission check for KDSKBMETA ioctl KDSKBMETA modifies keyboard meta mode but lacks the !perm check that all other keyboard setter ioctls in vtkioctl enforce, allowing a process to change meta mode on a non-controlling...
CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...
CVE-2026-74675 vt: stabilize tty reference in kbd_keycode with tty_port_tty_get
In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...
EUVD-2026-64362
In the Linux kernel, the following vulnerability has been resolved: vt: stabilize tty reference in kbdkeycode with ttyportttyget kbdkeycode reads vc-port.tty without acquiring a tty reference, racing against conshutdown which clears port.tty under a different lock. Use ttyportttyget/ttykrefput to...
CVE-2026-74675
A race condition in the Linux kernel's virtual terminal (vt) subsystem affects the kbd_keycode() function, which reads vc->port.tty without acquiring a proper tty reference. This races against con_shutdown(), which clears port.tty under a different lock, potentially leading to a use-after-free...
SUSE CVE-2026-72847
broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call in src/treebuild/builder.rs and in TreeLine::unprune in src/tree/treeline.rs, and no control-character filtering exists anywhere in the...
PT-2026-79681
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the virtual terminal vt component where the KDSKBMETA ioctl lacks a permission check. This allows an unauthorized process to modify the keyboard meta mode on a...
CVE-2026-62283 Nezha Monitoring: Cross-tenant terminal/file-manager session hijack via WebSocket stream UUID without ownership check
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and GET /ws/terminal/:id and GET...
EUVD-2026-64139
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and GET /ws/terminal/:id and GET...
CVE-2026-62283
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and "GET /ws/terminal/:id" and...
claude-bug-bounty v6.0.0
BugHunter AI-powered bug bounty hunting — recon to report, in your terminal. Free Setup · Quick Start · Commands · What It Finds · Install · FAQ !AwareXonehttps://assets.kitploit.com/production/public/readmes/65/29e21784cbe8b37142a688801ddd02d4084136effa303a59c67cdd8...
Zombie Card: An expired Visa credit card can be used for purchases
Did you know there is still a good reason to physically destroy your expired credit card? Scientific research found that the expiration date used by payment terminals on some contactless cards was not effectively protected against tampering. University of Massachusetts Amherst researchers Raja...
SUSE CVE-2026-65611
nnn does not sanitize the path variable. An attacker can create a directory on a shared filesystem, removable media, or inside an extracted archive whose name contains a single quote followed by shell syntax. If the victim enters that directory in nnn and uses the batch copy or move workflow, the...
mboxshell v0.7.1
mboxShell Fast terminal viewer for MBOX files of any size. Open, search and export emails from Gmail Takeout backups 50 GB+ without loading them into memory. Leer en Espanol / Spanish Why this project exists When you export your email from Gmail using Google Takeout, you get one or more .mbox fil...
wlctl v0.1.10
wlctl WiFi TUI for NetworkManager. Why impala is a great wifi TUI but it talks to iwd. If your distro already runs NetworkManager most do — GNOME, KDE, Ubuntu, Fedora, Pop, …, you can't drop impala in without ripping the stack out. wlctl keeps the impala UX and points it at NetworkManager, so it...
PT-2026-79458
Name of the Vulnerable Software and Affected Versions Nezha Monitoring versions 1.14.13 through 1.14.14 Nezha Monitoring versions 2.0.0 through 2.0.9 Description Nezha Monitoring fails to bind stream identifiers created by the CreateStream function in service/rpc/io stream.go to the user who...
CVE-2026-62283: Authorization Bypass Through User-Controlled Key
Nezha Monitoring is a self-hostable, lightweight, servers and websites monitoring and O&M tool. Nezha versions 1.14.13 through 1.14.14 and 2.0.0 through 2.0.9 do not bind stream identifiers created by CreateStream in service/rpc/iostream.go to their creating user, and GET /ws/terminal/:id and GET...
Linux Distros Unpatched Vulnerability : CVE-2026-72847
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - broot renders each file and directory name in its interactive tree view exactly as read from the filesystem. Names are converted with a plain tostringlossy call...
