Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: irqchip/irq-riscv-imsic-early: Fixed the fwnode leak that occurred when the state setup failed. imsicearlyacpiinit allocates a firmware node before setting up the IMSIC state. If imsicsetupstate fails, the function returns...

Malicious Package

Overview python-walletlibr-v is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

PT-2026-80982

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the first name value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the nam...

CVE-2026-76837: Improper Neutralization of Input During Web Page Generation

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

CVE-2026-74524

A flaw was found in the Linux kernel. When performing memory hot-remove operations on systems using RISC-V architecture, an out-of-bounds page-table walk can occur. This issue arises because the system attempts to access memory outside of its designated boundaries, potentially leading to a kernel...

Linux Distros Unpatched Vulnerability : CVE-2025-25977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement. CVE-2025-25977 Note that Nessus relies on...

CVE-2026-67846-BOOM-NBDTLB

CVE-2026-67846: Assegnazione errata dei privilegi in BOOM NBDTLB ID CVE CVE-2026-67846 Panoramica La Berkeley Out-of-Order Machine BOOM al commit 5223e44cfeb26f41380057a2eb4d651197475f69 contiene un potenziale problema di assegnazione errata dei privilegi nelle implementazioni NBDTLB v3 e v4. Il...

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-30250: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code...

CVE-2026-67846

The Berkeley Out-of-Order Machine (BOOM) contains an incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations, specifically in the files src/main/scala/v3/lsu/tlb.scala and src/main/scala/v4/lsu/tlb.scala. The root cause is that the raw mstatus.SUM value is used in read and wr...

vpod v0.7.1

Vpod Getting Started • Documentation • Issues • Contributing What is a vpod ? A vpod is a lightweight, portable sandbox that gives an untrusted process an instant Linux environment. It uses a RISC‑V architecture and runs entirely inside WebAssembly. Fast startup : Boot in under a second. Portable...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

CVE-2026-72013

A flaw was found in the Linux kernel. Specifically, within the riscv architecture's machinekexecprepare function, a NULL pointer dereference can occur. This vulnerability arises when a NULL buffer is copied without proper validation during the kexec preparation process. An attacker could...

CVE-2026-67965: Improper Neutralization of Special Elements used in an OS Command

An issue in Tneda W20E v.16.01.0.62782 allows a remote attacker to execute arbitrary code via the urlneedlogin function...

PT-2026-76674

Just a quick note that I saw a new SABB Active Backup spk posted this morning. Version is 3.2.1-25059 dated 12-Aug-2026. This is one of my most important packages so I'll be checking it out. Changelog Fixed a security vulnerability CVE-2026-15716 Fixed an issue where backing up or restoring Hyper...

CVE-2026-67965

The Tenda W20E V5.0 wireless router, running firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin, is vulnerable to an authentication bypass and remote code execution (RCE) . The url_need_login function fails to enforce authentication for specific endpoints when the administrator password rema...

PT-2026-76873

Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2 Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-50775

A blind SSRF vulnerability exists in DataHub v.1.5.0.1 , which allows a remote attacker to achieve arbitrary code execution . The root cause occurs when the server retrieves an image from a crafted URL ; notably, the application fails to return any content or errors directly. No specific remediat...

SUSE CVE-2026-74524

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove removepudmapping and removep4dmapping obtain a child table base with pudoffsetp4dp, 0 and p4doffsetpgd, 0, then add the index for addr. RISC-V folds page-table...

CVE-2026-74524

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove removepudmapping and removep4dmapping obtain a child table base with pudoffsetp4dp, 0 and p4doffsetpgd, 0, then add the index for addr. RISC-V folds page-table...