Linux kernel BPF Heap Buffer Overflow DoS

The vulnerability in the BTFID function within the kernel/bpf/bpflsm.c module, which supports the BPF interpreter of the Linux operating system, stems from the use of an unreentable function in a parallel context. Exploitation of this vulnerability may enable an attacker to compromise the...

msm_iommu_map Heap Buffer Overflow DoS

The vulnerability in the msmiommumap function within the drivers/gpu/drm/msm/msmiommu.c file of the Direct Rendering Infrastructure DRI driver for the Linux kernel system is related to improper validation of the function’s return value. Exploitation of this vulnerability may allow an attacker to...

Linux Kernel mac80211 Stack Heap Buffer Overflow DoS

The vulnerability of the function ieee80211invokefastrx in the net/mac80211/rx.c module of the mac80211 stack in the Linux operating system is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

mac80211 Stack Use-After-Free

The vulnerability of the ieee80211mlepcs function in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the mmcidfixupcpustotasks function in the kernel/sched/core.c module, which is part of the Linux operating system’s resource management support mechanism, relates to the execution of operations outside of buffers. Exploiting this vulnerability could allow an attacker to...

Linux kernel Hardware Monitoring Driver Use-After-Free

The vulnerability in the adm1266gpiogetmultiple function within the drivers/hwmon/pmbus/adm1266.c file of the Linux kernel’s hardware monitoring driver is related to buffer overflow conditions. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality, integrity...

netfilter TCP Packet DoS

The vulnerability of the nfconntracktcppacket function in the net/netfilter/nfconntrackprototcp.c module of the netfilter component of the Linux operating system is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to compromise...

Linux kernel USB device driver Module Heap Buffer Overflow DoS

The vulnerability in the omap2430probe function within the drivers/usb/musb/omap2430.c file of the Linux kernel USB device driver is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity,...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Linux arch/arm64/include/asm/tlb.h Heap Buffer Overflow DoS

The vulnerability in the tlbflush function within the arch/arm64/include/asm/tlb.h module of the Linux kernel is related to dereferencing a pointer with an expired lifetime. Exploitation of this vulnerability may allow an attacker to compromise the confidentiality, integrity, and availability of...

Linux IPv6 Kernel Heap Buffer Overflow DoS

The vulnerability of the ip6parsetlv function in the net/ipv6/exthdrs.c module of the Linux operating system’s IPv6 kernel implementation is related to the dereferencing of a pointer with an expired validity period. Exploiting this vulnerability could allow an attacker to compromise the...

Malware in @usemosaik/template-react-js

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @usemosaik/template-react-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3174ac7cecbc1869ae5ac87ea585de744f6b7d17b8c089b746384c2b7e2355a3 This template package ships files/vite.config.js which, after a benign Vite header, appends 26KB of heavily obfuscated code obfuscator.io-style...

CVE-2026-77968

hawtio-operator grants its ServiceAccount cluster-wide Secret read and write permissions via an overbroad ClusterRole (secrets: [create, get, list, update, watch] across all namespaces). Although the operator uses a controller-runtime label-selector cache for memory optimization, the ServiceAccou...

EUVD-2026-72692

A flaw was found in hawtio-operator. The operator's ClusterRole grants secrets: create, get, list, update, watch across all namespaces. While the operator uses a controller-runtime label-selector cache as a memory optimization, the ServiceAccount token authorizes read access to every Secret in th...

Gladinet CentreStack & Triofox - Hardcoded Credentials

Gladinet CentreStack and Triofox 16.12.10420.56791 contain a hardcoded credentials vulnerability caused by use of hardcoded AES cryptoscheme values, letting attackers perform arbitrary local file inclusion without authentication, potentially leading to full system compromise. id: CVE-2025-14611...

CVE-2026-50093

A vulnerability has been identified in Siveillance Control Pro V3.0 All versions V3.0.12.2173, Siveillance Control Pro V4.0 All versions V4.0.9.2178, Siveillance Control V3.0 All versions V3.0.22.2177, Siveillance Control V4.0 All versions V4.0.11.2177. A vulnerability in the OIS web module allow...

MAL-2026-16045 Malicious code in i18nexus (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37d8dfb4ceaec110414441ebad5da37dad342ef653a20499504385d9db1ffdac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in i18nexus-tools

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in i18nexus

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...