62132 matches found
MAL-2026-11461 Malicious code in eth-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7fbf15a08eb3568d462e06fa345cfdb59afe88bf38b63e47ecea29ea92c009 The package presents itself as an Ethereum bridge library but its index.js is a verbatim copy of the well-known eth-sig-util signature utility...
MINI-QMM3-3VCP-GV55
Bulletin has no description...
MINI-2GXV-968H-M5C6
Bulletin has no description...
MINI-W534-M3PM-MWHP
Bulletin has no description...
MINI-RJX4-2HJJ-R3CC
Bulletin has no description...
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 vivo PD2425 Exploit Adaptation Project A porti...
CVE-2026-18452
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
CVE-2026-18452 Rich Source｜DMS+ (Non-Mobile) - Use of Hard-coded Credentials
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
[SECURITY] Fedora 43 Update: libnbd-1.24.3-1.fc43
NBD =E2=80=94 Network Block Device =E2=80=94 is a protocol for accessing Bloc k Devices hard disks and disk-like things over a Network. This is the NBD client library in userspace, a simple library for writing NBD clients. The key features are: Synchronous and asynchronous APIs, both for ease of...
PT-2026-66793
Name of the Vulnerable Software and Affected Versions XAAP Application versions prior to 1.53 Description The XAAP Application on Android stores sensitive information in cleartext within an unencrypted database. This allows an attacker who has access to a jailbroken or otherwise compromised devic...
PT-2026-66719
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...
Cisco Adaptive Security Appliance (ASA) Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the...
CVE-2026-38713
TR1200 v2.4.15, TR3000 v2.4.21, WR300 v2.4.25, WR1200 v2.4.23, WR1300 v2.4.22, WR1500 v2.3.10, WR3000 v2.4.19, WR3600 v2.3.16, and WR6500 v2.3.15 were discovered to contain a command injection vulnerability in the ipsecconn interface. This vulnerability allows attackers to execute arbitrary...
Oracle Linux 8 : kernel (ELSA-2026-45115)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-45115 advisory. - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Aidan Wallace RHEL-213341 CVE-2026-63807 - KVM: x86: Don't recheck L1...
drivers/comedi/ni_atmio16d ATMIO16D DoS
The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
MAL-2026-11299 Malicious code in ethers.jsonn (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware acfd52ff30b26f15be66cbf87a098dde096288d776d0be4ecd555ac81e229f81 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @sourav_chanduka/core-no-ngrok (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3cde51a882f2a66e53c2a19231a1963c78555a63a7e2ea9c8e23b378ec072bd1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...