cve

SAFA details the full exploitation of CVE-2025-13032, turning a double-fetch vulnerability in Avast's kernel driver into a local privilege escalation to SYSTEM on Windows 11.

A while ago when I was running my Talos II in hashed page table (HPT) mode for KVM-PR purposes , I started noticing some weird kernel behavi...

PHP's http:// stream wrapper sent Authorization, Cookie and Proxy-Authorization to any host a redirect pointed at, the bug curl fixed in 2018.

To combat the exponential growth of AI-driven CVEs, Canonical is shifting to a rapid 2-week Linux kernel SRU cycle published weekly. Read about the update.

<p>Disclosure of, and fix for, a bug that could lead miners to inflate the Bitcoin supply.</p>

Kestra Unauthenticated RCE. Contribute to EQSTLab/CVE-2026-49869 development by creating an account on GitHub.

Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88771, CVE-2026-88772, CVE-2026-88773, CVE-2026-88774, CVE-2026-88775, CVE-2026

The September 22, 2026 out-of-band security update for Next.js is now available

Taking 'execute logging' a bit too literally - CVE-2026-88771

The app showed two codes. The API returned all of them, master PIN included. The Planck Proof team's coordinated disclosure of CVE-2026-75960.

CVE-2026-14540: an SSRF in Google's official MCP Toolbox for Databases, CVSS 8.0, credited by name in the fix. Why the bug class is invisible to standard dependency scanners.

For almost a year, my jailexec connection plugin let a compromised FreeBSD jail redirect a root-owned write onto the jail host. The input validation was fine. The problem was on which side of the j...

Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources.

Neutralizing CISA active Linux kernel CVEs (CVE-2025-39964, CVE-2026-53266, CVE-2025-39682) via modern eBPF, module disarmament, and containerd user namespaces. - mc493/linux-kernel-zero-day-mitiga...

No CVE needed: how a GitHub issue hijacked an AI agent