1237 matches found
drmemory
Dr. Memory: the memory debugger About Dr. Memory Dr. Memory is a memory monitoring tool capable of identifying memory-related programming errors such as accesses of uninitialized memory, accesses to unaddressable memory including outside of allocated heap units and heap underflow and overflow,...
redexer
redexer Redexer is a reengineering tool that manipulates Android app binaries. This tool is able to parse a DEX file into an in-memory data structure; to infer with which parameters the app uses certain permissions we name this feature RefineDroid; to modify and unparse that data structure to...
CVE-2026-109439
Lantronix XPress-DR and XPress-DR-I CoBos-family firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718...
EUVD-2026-101337
Lantronix XPress-DR and XPress-DR-I CoBos-family firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718...
CVE-2026-109439
The Lantronix XPress-DR and XPress-DR-I (CoBos-family) devices with firmware through 8.1.0.0 are vulnerable to an unauthenticated configuration write via the UDP configuration protocol on port 30718 . A remote attacker can send a type 0xF8 query to read live configuration data or a type 0xFD fram...
CVE-2026-109439 Lantronix XPress-DR 8.1.0.0 Unauthenticated Configuration Write via UDP 30718
Lantronix XPress-DR and XPress-DR-I CoBos-family firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and persistently overwrite device configuration by sending crafted frames to the unauthenticated UDP configuration protocol on port 30718...
dr_robot
. . . . . . . : \ : \ : \ : . \ : / : . \ \ :| | | || || || : | || | \ | : | | | :| | . | || : \ | : \ | : || | | : | | | |. / | || |\ . / |/ . / | | :/ || || :/ :/ || : : : Copyright 2019 National Technology & Engineering Solutions of Sandia, LLC NTESS. Under the terms of Contract...
CVE-2026-97481 serial: 8250: fix possible ISR soft lockup
In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel before version 5.15.13, the file drivers/net/ethernet/mellanox/mlx5/core/steering/drdomain.c misinterprets the return value of mlx5getuarspage. It expects the return value to be NULL in the error case, but in reality, it is an error pointer...
CVE-2026-71171
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...
CVE-2026-70419
Dell Cloud Disaster Recovery versions 20.2 and prior contain an OS Command Injection vulnerability. A high-privileged attacker with remote access can exploit it to achieve arbitrary command execution , with a CVSS 3.1 score of 9.1 (Critical) and a Changed Scope . CISA's SSVC assessment rates expl...
PT-2026-82257
Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in the REST API. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote...
Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update
Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.22.2 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-9558: MDR: Post-upgrade 4.21 to 4.22 DRPolicy validation failure in Metro DR DFBUGS-9404: Backport to...
CVE-2026-18411 Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100
The KARR Security System and SWDS dealer-installed automotive anti-theft systems use a shared Bluetooth authentication key across affected devices. An attacker within Bluetooth range can leverage this weakness to issue unauthorized commands to the vehicle, potentially allowing unauthorized access...
CVE-2026-18411
The CVE describes a vulnerability in KARR Security System and SWDS dealer-installed automotive anti-theft systems where a shared Bluetooth authentication key is used across affected devices. An attacker in Bluetooth range can issue unauthorized commands to the vehicle, potentially enabling door u...
CVE-2026-71261 dr_wav.h W64 CUE Chunk Metadata Parsing Integer Overflow Leading to Heap Buffer Overflow on 32-bit Builds
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
CVE-2026-71261
drlibs drwav.h all versions through current master contains an integer overflow in W64 CUE chunk metadata parsing. In drwavmetadataprocesschunk, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to sizet before dividing by DRWAVCUEPOINTBYTES; on 32-bit builds this truncation...
PT-2026-68134
Name of the Vulnerable Software and Affected Versions dr libs dr wav.h affected versions not specified Description An integer overflow exists in W64 CUE chunk metadata parsing. In the drwav metadata process chunk function, a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInBytes to...
The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 management platforms lies in the insufficient protection of registration data, allowing unauthorized access by attackers to protected information.
The vulnerability of Schneider Electric Saitel DR and Schneider Electric EasyLogic T150 control platforms relates to insufficient protection for registration data. Exploiting this vulnerability can allow unauthorized actors to gain unauthorized access to protected information...
