92 matches found
BlueKeep
Bluekeep PoC This repo contains research concerning CVE-2019-0708. Bluekeep or CVE-2019-0708 is an RCE exploit that effects the following versions of Windows systems: Windows 2003 Windows XP Windows Vista Windows 7 Windows Server 2008 Windows Server 2008 R2 The vulnerability occurs during...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID from the event ring element sent by the device; this value can be any number between 0 and 255. To prevent out-of-bounds access, a...
PT-2026-68322
Name of the Vulnerable Software and Affected Versions Spacebar Server versions prior to commit dcfd910 Description An authorization flaw allows authenticated attackers to join arbitrary group direct message channels without membership verification. By sending a PUT request to the '/channels/chann...
GHSA-X2FF-V5V8-M75M Open WebUI: Cross-channel message overwrite via chat completion API (single-model and multimodel message_ids)
Summary Any authenticated user can overwrite the content of a message in a channel they do not belong to including private and DM channels by sending a chat completion request with a channel:-prefixed chatid and a target messageid. The channel: path routes pipeline output through...
CVE-2026-41295 OpenClaw < 2026.4.2 - Untrusted Workspace Channel Shadow Code Execution during Built-in Channel Setup
OpenClaw before 2026.4.2 contains an improper trust boundary vulnerability allowing untrusted workspace channel shadows to execute during built-in channel setup and login. Attackers can clone a workspace with a malicious plugin claiming a bundled channel id to achieve unintended in-process code...
CVE-2026-32618 Discourse: Unauthorized channel membership inference via excluded_memberships_channel_id
Discourse is an open-source discussion platform. From versions 2026.1.0-latest to before 2026.1.3, 2026.2.0-latest to before 2026.2.2, and 2026.3.0-latest to before 2026.3.0, there is possible channel membership inference from chat user search without authorization. This issue has been patched in...
Azure Linux 3.0 Security Update: kernel (CVE-2022-48716)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-48716 advisory. - In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: wcd938x: fix incorrect use...
CVE-2025-20779
creationtimestamp| type| source ---|---|--- 2026-01-06 20:12:52+00:00| seen| Telegram/jBZlDbE9sXNOGZiNfLnczbuckfSwrbzvFqPwUO0qENjWP0...
kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp conn-chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered...
kernel: Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix "bad unlock balance" in l2capdisconnectrsp conn-chanlock isn't acquired before l2capgetchanbyscid, if l2capgetchanbyscid returns NULL, then 'bad unlock balance' is triggered...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988924)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988924 advisory. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: core: Validate channel ID when processing command completions MHI reads the channel ID...
CVE-2025-41443 Guest user can discover active public channels
Mattermost versions 10.5.x = 10.5.12, 10.11.x = 10.11.2 fail to properly validate guest user permissions when accessing channel information which allows guest users to discover active public channels and their metadata via the /api/v4/teams/teamid/channels/ids endpoint...
EUVD-2017-7145
Malware in sbrugna...
EUVD-2020-3528
Malware in sbrugna...
EUVD-2020-24927
Malware in sbrugna...
EUVD-2020-3479
Malware in sbrugna...
EUVD-2022-27663
Malicious code in bioql PyPI...
EUVD-2021-7420
Malicious code in bioql PyPI...