espectre

ESPectre Turn an ESP32 into a private, local Wi-Fi motion sensor. When someone moves through a room, they change the way Wi-Fi signals travel through it. ESPectre reads those changes and reports motion in real time. No camera, no microphone, no wearable, and no dedicated radar hardware: just a...

Physical Layer Anomaly Detection Via Adaptive Gaussian Mixture Model

Physical-layer spoofing attacks pose a critical threat to wireless localization systems by manipulating channel state information CSI. Detecting such attacks becomes particularly challenging when the attacker and the legitimate node are spatially proximate, as their CSI characteristics become...

CVE-2025-69720

CVE-2025-69720: ncurses infocmp -i Stack Buffer Overflow CWE-121 Reporter: Yixuan Cao Shenzhen University, [email protected] Environment Host: openEuler 22.03 LTS Linux aarch64 Toolchain: system clang 12.0.1 + AddressSanitizer Source: ncurses-6.4 and ncurses-6.5 prior to patch 20251213 Summa...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-adapter, argo-cd, k8s-device-plugin, hubble-ui, kubernetes, cert-manager-webhook-pdns, juicefs, grafana, zarf, yunikorn-web, falco-no-driver, flux, continuity, chartmuseum, aactl, rancher, headlamp, ingress-nginx-controller, rclone, terragrunt,...

GHSA-F4XW-M386-M277 vulnerabilities

Vulnerabilities for packages: karpenter, prometheus-adapter, argo-cd, k8s-device-plugin, hubble-ui, kubernetes, cert-manager-webhook-pdns, juicefs, grafana, zarf, yunikorn-web, falco-no-driver, flux, continuity, chartmuseum, aactl, rancher, headlamp, ingress-nginx-controller, rclone, terragrunt,...

CVE-2026-78669 vulnerabilities

Vulnerabilities for packages: chart-testing, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ssoadmin, crossplane-aws-monolith-fips, custom-pod-autoscaler-operator, sftpgo-plugin-kms, kubernetes, falcosidekick-fips, grafana-alloy, jaeger, cis-operator, supercronic-fips,...

GO-2026-6603 vulnerabilities

Vulnerabilities for packages: chart-testing, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ssoadmin, crossplane-aws-monolith-fips, custom-pod-autoscaler-operator, sftpgo-plugin-kms, kubernetes, falcosidekick-fips, grafana-alloy, jaeger, cis-operator, supercronic-fips,...

GO-2026-6612 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ssoadmin, crossplane-aws-monolith-fips, custom-pod-autoscaler-operator, sftpgo-plugin-kms, kubernetes, falcosidekick-fips, grafana-alloy, jaeger, cis-operator, supercronic-fips, falco-no-driver,...

GO-2026-6617 vulnerabilities

Vulnerabilities for packages: chart-testing, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ssoadmin, crossplane-aws-monolith-fips, custom-pod-autoscaler-operator, sftpgo-plugin-kms, kubernetes, falcosidekick-fips, grafana-alloy, jaeger, cis-operator, supercronic-fips,...

GO-2026-6611 vulnerabilities

Vulnerabilities for packages: chart-testing, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ssoadmin, crossplane-aws-monolith-fips, custom-pod-autoscaler-operator, sftpgo-plugin-kms, kubernetes, falcosidekick-fips, grafana-alloy, jaeger, cis-operator, supercronic-fips,...

CLEANSTART-2026-LC49486 Security fix for GHSA-j5w8-q4qc-rx2x applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1, cloud-provider-aws 1.34.1-r1

GHSA-j5w8-q4qc-rx2x affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63691

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authorization vulnerability in the Dell CSI Driver for PowerMax - csireverseproxy . An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Unauthorized access...

CVE-2026-63690

Dell Container Storage Modules, versions prior to 1.18.0, contains a Missing Authentication for Critical Function vulnerability in the csi-powerflex; csi-powermax; csi-powerstore. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to...

CVE-2026-63690

Dell Container Storage Modules (CSM) versions prior to 1.18.0 are vulnerable to a Missing Authentication for Critical Function vulnerability in the csi-powerflex , csi-powermax , and csi-powerstore components. An unauthenticated attacker with adjacent network access can exploit this flaw to cause...