OESA-2026-3103 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code ...

OESA-2026-3102 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code ...

OESA-2026-3046 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: The hardware emulation in the ofdpacmdaddl2flood of rocker device model in QEMU, as used in 7.0.0 and earlier, allows remote attackers to crash the host qemu and potentially execute code ...

CVE-2026-4930 DPA Countermeasures weakening on Series 3 devices

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations AES encryption/decryption and hashing. DPA Countermeasures on SYMCRYPTO can be weakened reduced entropy by forcing certain seed values if an attacker gains code...

CVE-2026-4930: Insufficient Entropy

SYMCRYPTO is the SiXG301's host side hardware engine accessed by PSA crypto library that accelerates symmetric cryptographic operations AES encryption/decryption and hashing. DPA Countermeasures on SYMCRYPTO can be weakened reduced entropy by forcing certain seed values if an attacker gains code...

CVE-2025-14972 Insufficient DPA countermeasure reseeding

Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. KSU keys using SYMCRYPTO will be impacted by this vulnerability...

CVE-2025-14972: Insufficient Entropy

Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat. KSU keys using SYMCRYPTO will be impacted by this vulnerability...

EUVD-2026-10067

TSPortal: Any user can forge self-deletion requests for any account...

CVE-2026-29788

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been...

Unverified Ownership

Overview miraheze/ts-portal is a Portal for handling and managing the investigation lifecycle for Trust and Safety at the WikiTide Foundation Affected versions of this package are vulnerable to Unverified Ownership due to the evidence handling in DPAController::store within...

CVE-2026-29788: Unverified Ownership

TSPortal is the WikiTide Foundation’s in-house platform used by the Trust and Safety team to manage reports, investigations, appeals, and transparency work. Prior to version 30, conversion of empty strings to null allows disguising DPA reports as genuine self-deletion reports. This issue has been...

CVE-2025-7432

CVE-2025-7432 concerns Silicon Labs’ Series 2 devices where DPA countermeasures are not reseeded under certain conditions. The vulnerability could enable an attacker to eventually extract secret keys via a differential power analysis (DPA) attack. The provided metrics indicate a low base score (C...

CVE-2025-7432: Insufficient Entropy

DPA countermeasures in Silicon Labs' Series 2 devices are not reseeded under certain conditions. This may allow an attacker to eventually extract secret keys through a DPA attack...

JetBrains ReSharper < 2025.2.4 Local Privilege Escalation (CVE-2025-64456)

The version of JetBrains ReSharper installed on the remote host is prior to 2025.2.4, and is, therefore, affected by a local privilege escalation vulnerability: - In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation. CVE-2025-644...

The vulnerability of the DPA Collector component of the ReSharper plugin in the cross-platform integrated development environment of JetBrains Rider allows attackers to escalate their privileges.

The vulnerability of the DPA Collector component in the ReSharper plugin for the cross-platform integrated development environment of JetBrains’ Rider software is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to gain increased...

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

EUVD-2025-44046

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...

CVE-2025-64456

In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalation...