CLEANSTART-2026-ZF54924 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...

CLEANSTART-2026-IF00623 Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content

Security vulnerability affects the go1.27 package. Building a malicious file with cmd/go can cause can cause a write to an attacker-controlled file with partial control of the file content...

[SECURITY] Fedora 45 Update: hevea-2.38-6.fc45

HEVEA is a quite complete and fast LATEX to HTML translator. HEVEA renders symbols by using the so-called HTML "entities", which modern browsers display correctly most of the time...

CVE-2026-25212

CVE-2026-25212 – PoC de RCE en Percona PMM Crítico – CVSS 9,9 – Ejecución remota de código autenticada en PMM 3.7. Descripción Esta prueba de concepto explota una vulnerabilidad donde un usuario interno de PostgreSQL en PMM mantiene privilegios 'SUPERUSER'. Un atacante autenticado con derechos...

VulnCheck KEV: CVE-2026-51886

langflow-ai langflow v1.9.3 is affected by: Code Injection. The impact is: execute arbitrary code remote. The component is: src/backend/base/langflow/api/v1/validate.py:validate-postvalidatecode-a-real-authenticated-http-post-to-api-v1. The attack vector is: Attack surface: HTTP or browser-backed...

PT-2026-106419

Unauthenticated Cross Site Scripting XSS in Contact Form to DB by BestWebSoft = 1.7.6 versions...

PT-2026-106499

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix OOB struct field reads in move smb2 ea to cifs In move smb2 ea to cifs, the while src size 0 loop condition is insufficient. It allows iteration to continue even if the remaining src size is too small to contain ...

PT-2026-106588

In the Linux kernel, the following vulnerability has been resolved: fs/dax: check zero or empty entry before converting xarray entry Calling dax to folio with empty entry causes kernel panic below when booting a VM with DAX enabled storage. This patch checks empty entry before calling dax to foli...

PT-2026-106574

In the Linux kernel, the following vulnerability has been resolved: btrfs: take commit root semaphore when iterating in mark block group to copy mark block group to copy iterates over the commit root with skip locking=true. A concurrent transaction commit can swap and free the commit root during...

PT-2026-106571

In the Linux kernel, the following vulnerability has been resolved: dma-buf: Fix silent overflow for phys vec to sgt In case MMIO size is bigger than 4G and peer2peer DMA goes through host bridge, we trigger a code path that assigns the total linked IOVA which is greater than 4G to mapped len...

Rocket.Chat

La solución segura y de código abierto definitiva para las comunicaciones de equipo Rocket.Chat es una plataforma de comunicaciones segura, completamente personalizable y de código abierto, desarrollada en TypeScript para organizaciones con altos estándares de protección de datos. Somos la soluci...

EUVD-2026-91120

Langflow: Title Authenticated Remote Code Execution in validatecode via Malicious Decorators Description...

CVE-2026-105766

The Chainguard Academy (edu) website is vulnerable to an HTTPS to HTTP downgrade attack due to the use of the backend-facing $scheme variable in the nginx.conf trailing-slash directory redirect. This issue exists in versions from commit 0b75ff98057f69b044a3e7194e428066ac5ad0d4 before commit 93dc0...

CVE-2026-6307

CVE-2026-6307: V8 JS-to-Wasm type confusion → RCE on Chrome 146 Local reproduction and weaponization of the V8 JS-to-Wasm deoptimization type confusion described by Nebula, taken to a xcalc popped from the renderer of Chrome for Testing 146.0.7680.165 the bug is fixed in 147.0.7727.101. All...

CVE-2014-4322

El código PoC funciona en Nexus 5 con Android 4.4.4 Escalada de privilegios: system-root, como parte de https://github.com/koozxcv/CVE-2014-7911-CVE-2014-4322getrootprivilege autor: andy sitio web: https://blog.csdn.net/koozxcv El exploit debe ejecutarse con privilegios de sistema y varios...

CVE-2024-1939

CVE-2024-1939 Esta es una breve descripción de la CVE-2024-1939, que utilicé para reclamar V8CTF M122. La causa raíz de este problema es la falta de soporte para kWasmS128 en la conversión wasm-to-js. En concreto, las operaciones wasmS128Const que aparecen en las pilas de parámetros se ignoran, l...

jenkinsci__git-client-plugin_CVE-2019-10392_2-8-4

Complemento de cliente Git Introducción El complemento de cliente Git proporciona interfaces de programación de aplicaciones API de Git para complementos de Jenkins. Puede obtener fetch, hacer checkout, crear ramas, listar, fusionar y etiquetar repositorios. Consulte la documentación de la API pa...

CVE-2026-53359

🚨 CVE-2026-53359 — Januscape Linux KVM Shadow Paging Use-After-Free Escape de Invitado a Anfitrión Januscape es una vulnerabilidad del Kernel de Linux KVM causada por una condición de Use-After-Free UAF en la x86 Shadow MMU. Bajo configuraciones vulnerables, un invitado malicioso puede corromper ...

MAL-2026-17413 Malicious code in yonzoffic-baileys (npm)

This package is part of a large family 100+ identified as of September 2026 of near-identical forks of the Baileys WhatsApp Web library that inject a covert channel-subscription action into the WhatsApp socket layer. On connect, the injected code issues an authenticated w:mex FOLLOW query queryid...

Dop2Mop

Dop2Mop Un recolector OpenGraph de prueba de concepto para BloodHound que mapea rutas de ataque desde infraestructura DevOps hasta MLOps. Basado en Pipelines of Privilege: Attack Paths from DevOps to MLOps Infrastructure de Brett Hawkins @h4wkst3r. Tabla de Contenidos Agradecimientos Resumen...