Recent Advisories

Severity ID Title Vendor Product Date Type
HIGH 7.3 CVE-2026-46250

MIPS: Work around LLVM bug when gp is used as global register variable_CVE-2026-46250

In the Linux kernel, the following vulnerability has been resolved: MIPS: Work around LLVM bug when gp is used as global register variable On MIP...

Linux Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 CVE
CRITICAL 9.1 CVE-2026-46244

netfilter: nft_inner: Fix IPv6 inner_thoff desync_CVE-2026-46244

In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_inner: Fix IPv6 inner_thoff desync In nft_inner_parse_l2l3(), ...

Linux Linux 3a07327d10a09379315c844c63f27941f5081e0a CVE
HIGH 8.7 CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API_CVE-2026-21837

HCL Digital Experience is affected by an OS command injection vulnerability in the Digital Asset Management API.  An attacker may execute arbitrary...

HCLSoftware Digital Experience 9.5 CVE
MEDIUM 6.1 CVE-2026-21826

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection_CVE-2026-21826

HCL Digital Experience and HCL Digital Experience Compose could be susceptible to Host header injection.  An attacker can manipulate the Host heade...

HCLSoftware Digital Experience & DX Compose 9.5 CVE
MEDIUM 6.1 CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center_CVE-2026-21825

HCL Digital Experience Compose is affected by a reflected cross-site scripting (XSS) vulnerability in the search center.  An attacker could execute...

HCLSoftware DX Compose 9.5 CVE
MEDIUM 6.4 CVE-2026-10732

CVE-2026-10732_CVE-2026-10732

All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive conta...

n/a decompress CVE
HIGH 7.8 9FE892C1-2347-

Exploit for Double Free in Microsoft_9FE892C1-2347-5D92-9FE3-8227B56D4622

CVE-2026-26179 PoC for CVE-2026-26179 / ZDI-26-276, my very own Secure Kernel bug. I'm well aware that I have a dedicated repository for my vulnera...

N/A N/A GITHUBEXPLOIT
NONE THN:51F8DAC1E19...

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network_THN:51F8DAC1E193E414EB3FF79AC2684016

![](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEibu0mX9Tusu3siXFJzPskfA1ZYZ2OdRJTegsJFkffBc9cBBPGWguTUAI3PPAaFy-WIjziA9PIrMrZNVuFVNm...

N/A N/A THN
NONE 3F7376C1-CE9F-

Kernel-Dojo-Labs_3F7376C1-CE9F-5F14-9701-5E3C1C613D73

Kernel-Dojo Lab An interactive practice environment for the Kernel-Exploit-Dojo challenge archive. Pick any of the 112+ Linux kernel CTF challenges...

N/A N/A GITHUBEXPLOIT
HIGH 10 A7A90EE8-8AB4-

Exploit for OS Command Injection in Vsftpd_Project Vsftpd_A7A90EE8-8AB4-5A6C-B232-E81EB21F6397

vsftpd 2.3.4 Backdoor Exploit A small, dependency-free Python 3 exploit for the vsftpd 2.3.4 backdoor CVE-2011-2523. It triggers the backdoor over ...

N/A N/A GITHUBEXPLOIT