21 matches found
CVE-2026-19935
The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...
CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...
CVE-2026-19935 Use-after-free of an L2CAP CoC channel object in the Zephyr Bluetooth host: RX work item is not cancelled on channel teardown
The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...
EUVD-2026-97106
The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...
CVE-2026-19935: Use After Free
The Bluetooth LE host queues received L2CAP connection-oriented channel CoC data for deferred processing through a struct kwork embedded in the channel object lechan-rxwork, handler l2caprxprocess whenever the channel uses a dynamic PSM 0x0080-0x00FF. Channel teardown in l2capchandestroy in...
Malicious code in imodiov-kufni-coc (npm)
Source: amazon-inspector 231e70af6270496b10470f3c372cf0d86cb52e5626a1a5093d62e59ace831751 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
CVE-2026-72333
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2capputident when the...
CVE-2026-72333 Bluetooth: L2CAP: fix tx ident leak for commands without a response
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: fix tx ident leak for commands without a response Commit 6c3ea155e5ee "Bluetooth: L2CAP: Fix not tracking outstanding TX ident" changed ident allocation to use an IDA, releasing idents in l2capputident when the...
CVE-2026-5068
A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation via chanops.allocbuf and the chosen RX pool has a userdatasize smaller than 2 bytes, the segmentation counter stored in t...
CVE-2026-5068
A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation via chanops.allocbuf and the chosen RX pool has a userdatasize smaller than 2 bytes, the segmentation counter stored in t...
CVE-2026-5068: Out-of-bounds Write
A remote, unauthenticated BLE peer can trigger a 2-byte out-of-bounds write in the Bluetooth host during L2CAP LE CoC SDU reassembly. When the application enables segmentation via chanops.allocbuf and the chosen RX pool has a userdatasize smaller than 2 bytes, the segmentation counter stored in t...
EUVD-2025-137110
Malicious code in imodiov-kufni-coc npm...
MAL-2025-9881 Malicious code in @zalastax/nolb-_coc (npm)
The package @zalastax/nolb-coc was found to contain malicious code...
coc-stats.net Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1119399 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting coc-stats.net website and...
COC Guide 2015 BME - Dynamic Code Loading, External URLs, SD-card access vulnerabilities
HackApp vulnerability scanner discovered that application COC Guide 2015 BME published at the 'play' market has multiple vulnerabilities...
Plans for CoC - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Plans for CoC published at the 'play' market has multiple vulnerabilities...
Wiki Guide for CoC - Dangerous filesystem permissions, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Wiki Guide for CoC published at the 'play' market has multiple vulnerabilities...
members.unioncountycoc.com Open Redirect vulnerability
Vulnerable URL: http://members.unioncountycoc.com/directory/OpenMemPage.jsp?memid=357=https://www.xssposed.org/=391 Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 10:33 GMT Vulnerability type:| Open Redirect Vulnerability status:| Publicly...
members.unioncountycoc.com XSS vulnerability
Vulnerable URL: http://members.unioncountycoc.com/directory/jsp/busdir/SearchResults.jsp Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 13:50 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...
coloradospringscococ.wliinc23.com Open Redirect vulnerability
Vulnerable URL: https://coloradospringscococ.wliinc23.com/CWT/EXTERNAL/WCPAGES/WCDIRECTORY/Directory.aspx?listingid=11934=6L3C1B068J=uweb=http://xssposed.org Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 12:42 GMT Vulnerability type:| Open...