Aggregator

Currently trending CVE - Hype Score: 15 - In the Linux kernel, the following vulnerability has been resolved: xfrm: ah6: validate routing header segments_left AH6 rearranges routing-header addresses before computing or verifying the ICV. ipv6_rearrange_rthdr() assumes that segments_left is not larger than the number ...

Currently trending CVE - Hype Score: 7 - In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge ebtables hooks ...

Currently trending CVE - Hype Score: 20 - In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different ...

Currently trending CVE - Hype Score: 7 - In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg Issuing two writes to the same af_alg socket is bogus as the data will be interleaved in an unpredictable fashion. Furthermore, concurrent writes ...

После генерации гипотез и анализа данных автоматизация добралась до физического эксперимента, где раньше всё зависело от человеческих рук.

A vulnerability was found in OrdaSoft Joomla Gallery Extension up to 6.2.6. It has been rated as problematic. The affected element is the function saveGallery of the component Gallery Component. Performing a manipulation of the argument category_names/catOrderIds/image-ordering results in sql injection. This vulnerability is identified as CVE-2026-88855. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in OrdaSoft Joomla Gallery Extension up to 6.2.6. It has been declared as critical. Impacted is the function getVar of the component mod_osgallery_search. Such manipulation leads to sql injection. This vulnerability is referenced as CVE-2026-88854. It is possible to launch the attack remotely. No exploit is available.

A vulnerability was found in OrdaSoft Joomla Gallery Extension 1.0.0-6.2.6. It has been classified as problematic. This issue affects the function updateOSGallery of the component JSON Request Body. This manipulation of the argument method/package causes code injection. The identification of this vulnerability is CVE-2026-88856. It is possible to initiate the attack remotely. There is no exploit available.

A vulnerability was found in BioStar VALKYRIE AURORA 2.10.2411.0800 and classified as critical. This vulnerability affects the function sub_1105C of the file BS_RVSIO64.sys of the component IOCTL Handler. The manipulation of the argument PhysicalAddress results in write-what-where condition. This vulnerability was named CVE-2026-94129. The attack needs to be approached locally. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability has been found in BioStar VIVID LED DJ 4.0.2411.1500 and classified as critical. This affects the function sub_1105C of the file BS_LED64.sys of the component IOCTL Handler. The manipulation of the argument AssociatedIrp leads to write-what-where condition. This vulnerability is uniquely identified as CVE-2026-94128. Local access is required to approach this attack. Moreover, an exploit is present. The vendor was contacted early about this disclosure but did not respond in any way.

September 21, 2026Thank

New releaseSep 21, 2026Brave browser for Android, iOS, Linux, macOS, Windows.ShareThis repository i

2026-09-17 (THURSDAY): SEVEN DAYS OF SCANS AND PROBES AND WEB TRAFFIC HITTING MY WEB SERVERNOTES

环境异常 当前环境异常，完成验证后即可继续访问。 去验证

2026-09-14 (MONDAY): BACKDOOR USING SCREENCONNECT FROM MALICIOUS EMAILNOTICE:Zip files are pa

Компактный Alerion рассчитан на цели, против которых радиоперехват может оказаться бесполезен.