6532 matches found
CVE-2026-80253: Improper Physical Access Control
An improper physical access control issue exists in ShizenBox2 dev-conf. If exploited, an attacker with physical access to the product may execute bootloader commands without authentication...
PT-2026-90887
In the Linux kernel, the following vulnerability has been resolved: net: remove CAP SYS RAWIO zero-padding in dev validate header dev validate header reads dev-hard header len directly when zero-padding short link layer headers for CAP SYS RAWIO holders: if capableCAP SYS RAWIO memsetll header +...
Malicious Package
Overview armada-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious Package
Overview chromatitle-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious code in chromatitle-dev (npm)
The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...
MAL-2026-15814 Malicious code in chromatitle-dev (npm)
The package 'chromatitle-dev' was identified as containing malicious obfuscated code. In src/utils/bootstrap.js, there is base64 encoded URL. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b720b488c4ac40cc60b8a514f2d16bf2858c4b501171816d38597aba076fe941...
@pixui-dev/inflight-report (>=0.0.7-inflight.3, <=0.1.0) potentially affected by CVE-2026-84373 via vitest (5.0.0-beta.5)
vitest NPM version 5.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on vitest and may be impacted: - @pixui-dev/inflight-report =0.0.7-inflight.3, =0.1.0 Source cves: CVE-2026-84373 Source advisory: MEND:CVE-2026-84373...
Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.30.0 Release.
Red Hat OpenShift Dev Spaces 3.30.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.30 release is based on...
CVE-2026-80703
A flaw was found in the Linux kernel's drm/amdkfd component. A local user with access to /dev/kfd could exploit a missing authorization check to terminate another process's active Graphics Processing Unit GPU debug session. This could lead to a denial of service for other users attempting to debu...
@meow-meow-dev/server-utilities (>=1.0.1, <=3.5.2), @nile-squad/nile (>=1.2.0, <=1.4.11) +2 more potentially affected by CVE-2026-81888 via @hono/oauth-providers (>=0.6.2, <=0.8.5)
@hono/oauth-providers NPM version =0.6.2, =1.0.1, =1.2.0, =0.1.0, =0.1.1, =0.9.1 Source cves: CVE-2026-81888 Source advisory: GHSA-FM3F-CH8H-QW8Q...
CVE-2026-80651
A flaw was found in the Linux kernel's crypto: ccp/sev-dev-tsm module. The dsmcreate function fails to properly validate the pdev-bus pointer, leading to a null pointer dereference. A local attacker could exploit this vulnerability to trigger a kernel crash, resulting in a Denial of Service DoS...
Exploit-Dev-Sandbox
Exploit-Dev Sandbox Task 6 — Offensive Security Capstone...
Linux Distros Unpatched Vulnerability : CVE-2026-80651
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks...
Exploit for CVE-2026-76581
CVE-2026-76581 - WPMU DEV Dashboard Vulnerability Detector A...
Five Critical WordPress Plugin and Theme Flaws Enable Site Takeover or RCE
Multiple critical security flaws have been disclosed in WordPress plugins and themes, including WPMU DEV Dashboard, Avada, TranslatePress, Pods, and GiveWP, that could lead to authentication bypass, account takeover, and arbitrary code execution. The vulnerabilities, according to Wordfence and...
SUSE CVE-2026-80651
In the Linux kernel, the following vulnerability has been resolved: crypto: ccp/sev-dev-tsm - bail out early when pdev-bus is NULL dsmcreate initially checks pdev-bus when computing segmentid: u8 segmentid = pdev-bus ? pcidomainnrpdev-bus : 0; But the next two lines unconditionally dereference...
SUSE CVE-2026-80703
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix missing authorization check in KFDIOCDBGTRAPDISABLE Prevent unauthorized termination of active GPU debug sessions. Previously, users with /dev/kfd access could terminate another process's debug session without...
GHSA-FMGP-Q6JX-GG3X KubeVela Terraform remote loader DoS via unbounded file read
Summary KubeVela's Terraform remote configuration loader can be abused to make vela-core read an unbounded byte stream into memory, causing an out-of-memory kill and a control-plane denial of service. The issue is reachable when a user with permission to create or update a core.oam.dev/v1beta1...
CVE-2026-55108 KubeVela Terraform remote loader DoS via unbounded file read
KubeVela is an open source application delivery platform. Prior to 1.9.14, from 1.10.0-alpha.1 until 1.10.9, and from 1.11.0-alpha.1 until 1.11.0-alpha.4, the Terraform remote configuration loader in pkg/controller/utils/capability.go, GetTerraformConfigurationFromRemote, clones a repository...