34017 matches found
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an incorrect PTP IRQ setting that fails to release the IRQ mapping, potentially leading to resour...
CVE-2026-42279: Authorization Bypass Through User-Controlled Key
solidtime is an open-source time-tracking app. In version 0.12.0, the PUT /api/v1/organizations/organization/time-entries/timeEntry API accepts a route-bound timeEntry from another organization when the caller has time-entries:update:all in the URL organization, allowing a known foreign time-entr...
ALSA-2026:A007 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: xfrm: esp: avoid in-place decrypt on shared skb frags CVE-2026-43284 For more details about the security issues, including the...
Cisco Expressway Series Remote Code Execution Vulnerability (regreSSHion) (cisco-sa-openssh-rce-2024)
According to its self-reported version, Cisco Expressway Series is affected by a vulnerability. - A remote code execution vulnerability exists in Cisco Expressway Series due to a signal handler race condition found in sshd, where a client does not authenticate within LoginGraceTime seconds, after...
Mozilla Thunderbird < 140.10.2
The version of Thunderbird installed on the remote Windows host is prior to 140.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-44 advisory. - Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR...
Linux Distros Unpatched Vulnerability : CVE-2026-43447
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iavf: fix PTP use-after-free during reset Commit 7c01dbfc8a1c5f iavf: periodically cache PHC time introduced a worker to cache PHC time, but failed to stop it...
CVE-2026-44578
creationtimestamp| type| source ---|---|--- 2026-05-07 23:40:51+00:00| seen| https://bsky.app/profile/securestep9.bsky.social/post/3mlcfbrg7m62h 2026-05-08 03:00:06+00:00| seen| Telegram/xvoYgOFnUf5jFw65bW2FC7fcn6orx4l4LTjm0d68ZkOEzo 2026-05-08 12:09:44+00:00| seen|...
CVE-2026-7891
creationtimestamp| type| source ---|---|--- 2026-05-07 23:24:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlceez7izf2i 2026-05-08 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116536365967570800 2026-05-08 01:30:29+00:00| seen|...
CVE-2026-39819
creationtimestamp| type| source ---|---|--- 2026-05-07 21:52:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlc7a4vlnj2p 2026-10-01 19:40:14+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3mwtmerej5p2p...
MAL-2026-3372 Malicious code in ninja-core-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 65af5eaa02abf860465d0ee9e11d7b10e3e1e36473aec951f8c1ea38ed8a8560 During installation, obfuscated code exfiltrates cryptocurrency wallet data to a hardcoded location --- Category: MALICIOUS - The campaign has clearly maliciou...
CVE-2026-44113
OpenClaw before 2026.4.22 contains a time-of-check/time-of-use race condition in the OpenShell filesystem bridge that allows attackers to read files outside the intended mount root. Attackers can exploit symlink swaps during filesystem operations to bypass sandbox restrictions and access...
CVE-2026-39511
creationtimestamp| type| source ---|---|--- 2026-05-07 18:33:38+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mlbu4gi6bs26...
Important: Red Hat Security Advisory: kernel-rt security update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
CVE-2026-41490
creationtimestamp| type| source ---|---|--- 2026-05-07 17:09:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mlbpgl5w4l2e 2026-05-07 19:20:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mlbwqptavd2e 2026-06-13 11:00:13+00:00| published-proof-of-concept|...
CVE-2026-30817
creationtimestamp| type| source ---|---|--- 2026-05-07 14:30:11+00:00| seen| https://infosec.place/objects/72976457-95a7-4160-b13f-f4b172a9b40d...
Chromium: CVE-2026-7988 Type Confusion in WebRTC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
CVE-2026-41688
Wallos is an open-source, self-hostable personal subscription tracker. In versions 4.8.4 and prior, the incomplete SSRF fix in Wallos validates webhook URLs via gethostbyname but passes the original hostname to cURL without CURLOPTRESOLVE pinning on 10 of 11 outbound HTTP endpoints, leaving a DNS...
Build Fast, Build Secure: Wiz findings are now in Lovable
With Wiz in Lovable, every builder can catch and fix risks in real time, keeping apps secure as they’re created...
