SUSE CVE-2026-72405

In the Linux kernel, the following vulnerability has been resolved: net: udptunnel: prevent double queueing in udptunnelnicdevicesync Yue Sun reported a use-after-free and debugobjects warning in udptunnelnicdevicesyncwork during concurrent device operations. The workqueue core clears the interna...

SUSE CVE-2026-72406

In the Linux kernel, the following vulnerability has been resolved: net: sungem: fix probe error cleanup geminitone calls gemremoveone when registernetdev fails. gemremoveone unregisters and frees resources owned by the netdevice, including the DMA block, MMIO mapping, PCI regions, and the...

SUSE CVE-2026-72449

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix listdel corruption in kfdcriuresumesvm The cleanup tail of kfdcriuresumesvm walks svms-criusvmmetadatalist and kfrees each struct criusvmmetadata without removing it from the list. The list head is left pointing a...

CVE-2022-47131

CVE-2022-47131 Academy LMS history.pushState'', '', '/'...

SUSE CVE-2026-74392

In the Linux kernel, the following vulnerability has been resolved: dm: limit target bio polling to one shot dmpollbio is the -pollbio callback for a stacked dm device. The caller only knows about the dm queue, so it may decide to do a spinning poll if it thinks a single queue is being polled...

SUSE CVE-2026-81928

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sigdata when re-encoding a message with a misplaced TSIG record. sigdata signs a message by re-encoding it, and removes TSIG records only from the additional section. A TSIG decoded into the answer or...

satellite

satellite Satellite is an web payload hosting service which filters requests to ensure the correct target is getting a payload. This can also be a useful service for hosting files that should be only accessed in very specific circumstances. Quickstart Guide 1. Install satellite on Ubuntu using th...

Discuz-X5.0-Authentication-Bypass-Exploit-Framework

Фреймворк эксплуатации обхода аутентификации Discuz! X5.0 ⚡ CVE-2026-49952 | CVSS 9.1 Критический | Версия 1.0.0 Профессиональный инструмент для тестирования на проникновение, предназначенный для выявления и демонстрации критической уязвимости обхода аутентификации в Discuz! X5.0. 📋 Содержание ⚠️...

firecall

firecall Automate SSH communication with firewalls, switches, etc. Description These scripts are designed to automate sending commands to a Cisco ASA firewall. The intended purpose here is to eliminate the need to manually log in to a firewall to make changes. This code can be run directly via...

CobaltStrikeDos

Уязвимость типа «отказ в обслуживании» DoS CVE-2021-36798 была обнаружена в Cobalt Strike. Уязвимость была устранена в рамках версии 4.4. Дополнительную информацию можно найти здесь Использование root@kitploit: python3 CobaltStrikeDos.py https://1.1.1.1 root@kitploit: $ python3 CobaltStrikeDos.py...

LFI-Destruction

🔥 LFI-Destruction – Фреймворк авторизованного тестирования на проникновение LFI-Destroyer — это комплексный модульный фреймворк эксплуатации Local File Inclusion LFI, разработанный для авторизованных специалистов по безопасности. Он объединяет множество атакующих техник в единый простой в...

CVE-2022-26923

CVE-2022-26923 Описание Эта уязвимость позволяла пользователю с низкими привилегиями повысить их до администратора домена в среде Active Directory по умолчанию с установленной ролью сервера Active Directory Certificate Services AD CS. Она в основном связана с ролью Active Directory Certificate...

Your AI chats could be used in court

You might tell an AI chatbot secrets that you wouldn't divulge to your closest friends. If you do, though, beware: They could end up as evidence in court. An article in the Washington Post this week highlighted several cases in which people had discussed sensitive information with AI systems like...

K000163177: Multiple Vim vulnerabilities

Security Advisory Description CVE-2024-41957 Vim is an open source command line text editor. Vim v9.1.0647 has double free in src/alloc.c:616. When closing a window, the corresponding tagstack data will be cleared and freed. However a bit later, the quickfix list belonging to that window will als...

CTT-Kernel-Resonance-io_uring-Temporal-Phase-Transition

Этот эксплойт для CVE-2026-24102 представляет собой вершину серии SimoesCTT. Атакуя iouring — самый продвинутый асинхронный интерфейс ядра Linux — вы атакуете саму концепцию «последовательной логики». В iouring системные вызовы не выполняются; они текут. Мы воспользуемся Временным окном между...

MobileIron Core & Connector <= v10.6 & Sentry <= v9.8 - Remote Code Execution

A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database RDB version 2.0.0.1 and earlier contain...

CVE-2026-19719

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...

CVE-2026-19723

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...

EUVD-2026-69834

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not properly escape a value taken from the incoming request before outputting it in an inline JavaScript event handler, leading to Reflected Cross-Site Scripting which is triggered when a user interacts with...

EUVD-2026-69833

The Social Media Share Buttons & Social Sharing Icons WordPress plugin before 3.0.1 does not escape the post title before outputting it in an inline JavaScript event handler, allowing users with the Contributor role and above to perform Stored Cross-Site Scripting attacks which are triggered when...