326 matches found
FreeBSD -- Kernel stack disclosure in Linux compatibility layer
Problem Description: The Linux waitid implementation translates a FreeBSD siginfot struct into a stack-declared Linux siginfot. It did not first zero the stack struct. Impact: An unprivileged user may observe 104 bytes of uninitialized kernel stack data, which may contain sensitive information...
CVE-2026-8479
IEC 60870-5-104 used in bidirectional mode in RTU500 is vulnerable for a NULL pointer dereferencing, if a specially crafted sequence of messages is sent for a certain time, causing Denial of Service impact. Product is only affected if IEC 60870-5-104 functionality in bidirectional mode BCI is...
CVE-2026-1773
IEC 60870-5-104 used in RTU500: Potential Denial of Service impact on reception of invalid U-format frame. Product is only affected if IEC 60870-5-104 bi-directional functionality is configured. Enabling secure communication following IEC 62351-3 does not remediate the vulnerability but mitigates...
CVE-2025-69287 BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
The BSV Blockchain SDK is a unified TypeScript SDK for developing scalable apps on the BSV Blockchain. Prior to version 2.0.0, a cryptographic vulnerability in the TypeScript SDK's BRC-104 authentication implementation caused incorrect signature data preparation, resulting in signature...
GHSA-VJPQ-XX5G-QVMM BSV Blockchain SDK has an Authentication Signature Data Preparation Vulnerability
BRC-104 Authentication Signature Data Preparation Vulnerability Summary A critical cryptographic vulnerability in the TypeScript SDK's BRC-104 authentication implementation caused incorrect signature data preparation, resulting in signature incompatibility between SDK implementations and potentia...
PT-2026-20262
Name of the Vulnerable Software and Affected Versions BSV Blockchain SDK versions prior to 2.0.0 Description A cryptographic issue exists in the BSV Blockchain SDK's BRC-104 authentication implementation. Specifically, incorrect signature data preparation in the Peer.ts file, within the...
CVE-2026-2034
creationtimestamp| type| source ---|---|--- 2026-02-13 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-104/ 2026-02-21 00:03:09+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfdd3nptwd2h 2026-02-26 03:00:15+00:00| seen|...
Google Chrome < 104.0.5112.102 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 104.0.5112.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202208stable-channel-update-for-desktop16 advisory. - Use after free in Browser Creation in Google Chrome prior to 104.0.5112.1...
MiracleLinux 8 : grafana-pcp-5.1.1-11.el8_10 (AXSA:2026-104:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-104:01 advisory. crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate CVE-2025-61729 Tenable has extracted the preceding...
CVE-2022-38475
An attacker could have written a value to the first element in a zero-length JavaScript array. Although the array was zero-length, the value was not written to an invalid memory address. This vulnerability affects Firefox 104...
CVE-2024-9684
FreyrSCADA/IEC-60870-5-104 server v21.06.008 is affected by a denial-of-service vulnerability triggered by specific message sequences. Root cause relates to how the server handles certain sequences, leading to an availability impact. The CVE is referenced across multiple sources (NVD, CVE List, C...
Malicious code in elf-stats-snowdusted-bauble-104 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32651013dbe2e3fdb98e6eddaa6dad8fd1be541a944f75947158171794560bdd The package elf-stats-snowdusted-bauble-104 was found to contain malicious code...
MAL-2025-192139 Malicious code in elf-stats-snowdusted-bauble-104 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32651013dbe2e3fdb98e6eddaa6dad8fd1be541a944f75947158171794560bdd The package elf-stats-snowdusted-bauble-104 was found to contain malicious code...
MAL-2025-174620 Malicious code in hitachi-poke104 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2d56ea2564e895cc8bb966113b086b57df39d52d897b2457fad5cc3217308453 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155667 Malicious code in hariyono-104 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02b8041ffbfdc322c3d9f432ae1559c3d5b02ea2fb1e935e000499629aa409b9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
airpig2011 IEC104 安全漏洞
airpig2011 IEC104 is a protocol used for power system automation communication by the individual developer dj chen in China. A security vulnerability exists in airpig2011 IEC104 Commit be6d841 and prior versions, which originates from a post-release reuse during multi-threaded execution that coul...
CVE-2025-9554
Technical details (affected versions, root cause, impact, exploit status, and fixes) for CVE-2025-9554 are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.
CVE-2025-9554 Owl Carousel 2 - Critical - Unsupported - SA-CONTRIB-2025-104
Vulnerability in Drupal Owl Carousel 2.This issue affects Owl Carousel 2:...
