Vulnerabilities & fixes · Archive

Vulnerabilities & fixes

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Kali Linux 2026.2 Release (GNOME 50, KDE 6.6, Helper Scripts, APT Formats & VM Boot Tweaking) ↗ (opens in a new tab)

  Kali Linux · Published 2026-06-29 · First collected 2026-10-24

• Android SELinux Internals Part IV - Policy Analysis, Kernel Mitigations, and Android 16 Changes ↗ (opens in a new tab)

  8kSec Blog · Published 2026-06-24 · First collected 2026-10-24

• ShinyHunters’ 0-day attacks: After patching, find out if you were breached ↗ (opens in a new tab)

  Intel 471 Blog · Published 2026-06-23 · First collected 2026-10-24

• Apple Container Internal ↗ (opens in a new tab)

  u1f383 · Published 2026-06-23 · First collected 2026-10-24

• Break my Passwordless Recovery Protocol and get a 50€ Bug-Bounty ↗ (opens in a new tab)

  TSMR.eu · Published 2026-06-23 · First collected 2026-10-24

• CVE-2026-49413 - FreeBSD LPE via Linuxulator AT_SECURE Logic Bug ↗ (opens in a new tab)

  ii4gsp · Source updated 2026-06-11 · First collected 2026-10-24

• Liferay vulnerability scanner: How to detect and remediate CVEs in Liferay Portal and DXP ↗ (opens in a new tab)

  Acunetix Blog · Published 2026-06-09 · First collected 2026-10-24

• Please Do Not Hack Me - The Tale of a TeamSpeak Use-After-Free ↗ (opens in a new tab)

  modzero / Blog · Published 2026-06-03 · First collected 2026-10-24

• ComoDoS - Exploiting a Remote Kernel Vulnerability in Comodo Internet Security ↗ (opens in a new tab)

  MalwareTech · Published 2026-06-03 · First collected 2026-10-24

• From breaking into my ISP router to finding a MediaTek kernel 0day ↗ (opens in a new tab)

  hacefresko · Published 2026-06-01 · First collected 2026-10-24

• Smuggling Through the Front Door... Achieving 0-Click XSS with Cache Poisoning ↗ (opens in a new tab)

  Malicious Group · Published 2026-05-30 · First collected 2026-10-24

• CVE-2026-25600 — Credential Exposure Vulnerability in Trac PDBM ↗ (opens in a new tab)

  SI-CERT news · Published 2026-05-29 · First collected 2026-10-24

• [advisory] Persistent Remote DoS via Integer Underflow in Wire iOS ↗ (opens in a new tab)

  BLACKWING INTELLIGENCE on Blackwing Intelligence · Published 2026-05-29 · First collected 2026-10-24

• Exploring Agent based Cloud Review Capabilities ↗ (opens in a new tab)

  Aura Research Division · Published 2026-05-26 · First collected 2026-10-24

• Negative-Days with Vulnerability Spoiler Alert: Three Months Later ↗ (opens in a new tab)

  Spaceraccoon's Blog · Published 2026-05-24 · First collected 2026-10-24

• CVE-2026-40369: Twelve Bytes to Escape the Browser Sandbox ↗ (opens in a new tab)

  VoidSec · Published 2026-05-20 · First collected 2026-10-24

• AMD Ionic Driver Vulnerabilities Affecting VMware ESX ↗ (opens in a new tab)

  VMware Security Blog · Published 2026-05-12 · First collected 2026-10-24

• Security Onion and Linux Kernel Dirty Frag Vulnerability CVE-2026-43284 ↗ (opens in a new tab)

  Security Onion · Published 2026-05-08 · First collected 2026-10-24

• Non-Determinism of Maps in Golang: Why, How, and the Consequences ↗ (opens in a new tab)

  Maxwell Dulin's Blog · Published 2026-05-06 · First collected 2026-10-24

• Quacc++: Automated Open Source Vulnerability Discovery ↗ (opens in a new tab)

  Blog - Somerset Recon · Published 2026-05-05 · First collected 2026-10-24

• Three Bugs Walk Into a PDF - Prototype Pollution, Served Cold ↗ (opens in a new tab)

  StreyPaws · Published 2026-04-29 · First collected 2026-10-24

• TAPOcalypse Now: Exploiting TP-Link Smart Devices From Anywhere ↗ (opens in a new tab)

  Archives on taszk.io labs · Published 2026-04-28 · First collected 2026-10-24

• Exploiting BLE Re-Pairing with the BLERP Attacks ↗ (opens in a new tab)

  Daniele Antonioli · Published 2026-04-23 · First collected 2026-10-24

• Some notes on the security properties of the pipe_buffer kernel object ↗ (opens in a new tab)

  Alexander Popov · Published 2026-04-20 · First collected 2026-10-24

• The Frontier Isn’t the Model: Why ‘Good Enough’ Reasoning + Scaffolding Is More Important ↗ (opens in a new tab)

  Theori BLOG · Published 2026-04-16 · First collected 2026-10-24

• Certified Azure Red Team Expert (CARTE) Review ↗ (opens in a new tab)

  Steflan’s Security Blog · Published 2026-04-15 · First collected 2026-10-24

• VMware Guest To Host ↗ (opens in a new tab)

  r0keb · Published 2026-04-04 · First collected 2026-10-24

• kernel alchemy pt. 1: developing exploit primitives with CVE-2025-20741 ↗ (opens in a new tab)

  hyprblog · Published 2026-04-02 · First collected 2026-10-24

• BitLocker's Little Secrets: The Undocumented FVE API ↗ (opens in a new tab)

  itm4n's blog · Published 2026-04-01 · First collected 2026-10-24

• A Technical Deep Dive into CVE-2024-23380: Exploiting GPU Memory Corruption to Android Root ↗ (opens in a new tab)

  Android Offensive Security Blog · Published 2026-03-28 · First collected 2026-10-24