Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

4 briefs RSS
medium advisory

Exploitation of Linux Kernel GSM 0710 TTY Multiplexor Race Condition

An unprivileged local user can escalate privileges to root by exploiting a race condition in the Linux kernel GSM 0710 tty multiplexor (CVE-2023-6546).

Linux kernel privilege-escalation linux kernel
1r 1t 5c updated
high advisory

SQL Injection Vulnerability in Cacti

A vulnerability in Cacti versions prior to 1.2.27 allows an authenticated remote attacker to perform SQL injection, potentially leading to unauthorized database access or information disclosure.

Cacti
1t 1c
high advisory

CVE-2026-12957: Amazon Q VS Code Extension Arbitrary Code Execution

A high-severity vulnerability (CVE-2026-12957) in the Amazon Q Developer Extension for Visual Studio Code allowed attackers to achieve arbitrary code execution and cloud credential theft by automatically loading and executing malicious Model Context Protocol (MCP) server configurations from a `.amazonq/mcp.json` file in a repository without user consent, providing full access to a developer's environment and cloud credentials.

PoC Amazon Q Developer Extension for Visual Studio Code +18 vulnerability code-editor cloud rce vs-code supply-chain
1r 4t 5c 2i updated
medium advisory

Multiple Vulnerabilities in Tenable Sensor Proxy

Multiple vulnerabilities in Tenable Sensor Proxy versions prior to 1.4.0 could allow a remote attacker to cause a denial of service, data confidentiality breaches, and other unspecified security impacts.

Sensor Proxy vulnerability dos dataleak
1r 1t 5c