cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-13506 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-13506 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-12816 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-12816 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-12803 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-12803 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-58062 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-58062 Source advisory:...

CVE-2026-20466

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2026-20466

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2026-20466

A heap buffer overflow vulnerability in sec boot allows for a local escalation of privilege . An attacker with physical access to the device can exploit this without needing additional execution privileges or user interaction. This issue affects specific MediaTek hardware components. Remediation ...

EUVD-2026-52056

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2026-20466

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-59647 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-59647 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-59648 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-59648 Source advisory:...

cn.loyom.boot:loyom-boot-business-demo (1.0.3-jdk21), cn.loyom.boot:loyom-boot-business-sqlite-exe-demo (1.0.3-jdk21) +432 more potentially affected by CVE-2026-59650 via org.bouncycastle:bcprov-lts8on (>=2.73.0, <=2.73.11)

org.bouncycastle:bcprov-lts8on MAVEN version =2.73.0, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.0-jdk21, =1.0.3-jdk21, =1.0.3.2-jdk21 and more Source cves: CVE-2026-59650 Source advisory:...

PT-2026-67154

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

CVE-2026-20466: Out-of-bounds Write

In sec boot, there is a possible escalation of privilege due to a heap buffer overflow. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID:...

Exploit for Use After Free in Linux Linux_Kernel

CVE-2026-43499 – Android arm64 Local Privilege Escalation A res...

opentaint analyzer/2026.08.01.a8995a6

The open source taint analysis engine for the AI era Formal taint analysis for application security — finds what AST-pattern matchers miss, lets LLM agents enact rules from vulnerabilities, scales where neither can alone. English | 简体中文 | 繁體中文 | 한국어 | Deutsch | Español | Français | Italiano | Dan...

Malicious code in test-dev-boot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd45eccde1d78006f2a808730aa4723756d255697ac1479d52aa7e89f792e51 On require/import and when invoked as a bin, the package's main entrypoint detects Windows and installs an...

MAL-2026-11488 Malicious code in test-dev-boot (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1fd45eccde1d78006f2a808730aa4723756d255697ac1479d52aa7e89f792e51 On require/import and when invoked as a bin, the package's main entrypoint detects Windows and installs an...

Malicious Package

Overview test-dev-boot is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Silver Fox Targets Japanese Manufacturer with 3-Driver BYOVD Chain and ValleyRAT

The Chinese cybercrime group known as Silver Fox has been observed using new drivers as part of bring your own vulnerable driver BYOVD attacks targeting a Japanese organization in the industrial manufacturing sector to ultimately deliver ValleyRAT aka Winos 4.0 for persistent remote access. "In...