CVE-2026-98431

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmaplock/disassociationlock circular dependency Commit 51976c6cd786 "RDMA/core: Provide rdmausermmapdisassociate to disassociate mmap pages" introduced disassociationlock to protect new mmap registrations against...

CVE-2026-98431

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmaplock/disassociationlock circular dependency Commit 51976c6cd786 "RDMA/core: Provide rdmausermmapdisassociate to disassociate mmap pages" introduced disassociationlock to protect new mmap registrations against...

CVE-2026-98431

The Linux kernel RDMA/uverbs component contains a circular locking dependency (ABBA deadlock) involving the mmap_lock and disassociation_lock. The issue was triggered by a commit that introduced disassociation_lock to protect new mmap registrations against uverbs_user_mmap_disassociate(). Specifi...

ROOT-APP-MAVEN-CVE-2026-41842 CVE-2026-41842 in org.springframework:spring-webmvc - Patched by Root

Root has patched CVE-2026-41842 in the org.springframework:spring-webmvc package for Root:Maven. Multiple fixed versions available...

Malicious code in @mntv-analysis/ui-components (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 50.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

NuReaper

NuReaper — NuGet Package Security Scanner ⚠️ Work in Progress — The project is actively developed. Core scanning engine is rebulding NuReaper is a .NET 8 backend API that automatically analyzes the security of NuGet packages. You provide a link to any NuGet package, and the system recursively...

cve-2023-2745

How to use Save the file as checkcve-2023-2745.py and give it execute permission: chmod +x checkcve-2023-2745.py Install the dependency once: python3 -m pip install requests Run: python3 checkcve-2023-2745.py https://example.com...

fad-checker

fad-checker AKA F ormidable A uditor's D ependency C hecker AKA F uckin' A utonomous D ependency C hecker fad-checker is a polyglot dependency auditor built for professional code audits. It scans 10 ecosystems + 9 CMS/Frameworks WordPress, Drupal, Symfony, Laravel… in one pass, with no build tool...

PT-2026-114410

In the Linux kernel, the following vulnerability has been resolved: RDMA/uverbs: Fix mmap lock/disassociation lock circular dependency Commit 51976c6cd786 "RDMA/core: Provide rdma user mmap disassociate to disassociate mmap pages" introduced disassociation lock to protect new mmap registrations...

GraphQLer

The only dependency-aware GraphQL API testing tool! GraphQLer is a cutting-edge tool designed to dynamically test GraphQL APIs with a focus on adaptability. It offers a range of sophisticated features that streamline the testing process and ensure robust analysis of GraphQL APIs. GraphQLer...

CVE-2021-3345

CVE-2021-3345 How to build vulnerable libgcrypt git clone --single-branch --branch LIBGCRYPT-1.9-BRANCH https://dev.gnupg.org/source/libgcrypt.git cd libgcrypt git checkout aa3f595341eb ./autogen.sh ./configure --enable-maintainer-mode && make How to use exploit make ./main This vulnerability is...

jeremylong__DependencyCheck_CVE-2018-12036_3-1-2

Dependency-Check Dependency-Check is a utility that attempts to detect publicly disclosed vulnerabilities contained within project dependencies. It does this by determining if there is a Common Platform Enumeration CPE identifier for a given dependency. If found, it will generate a report linking...

CVE-2024-21644-Poc

CVE-2024-21644 POC Install modules: pip install requests pip.install colorama...

MAL-2026-17872 Malicious code in @newspage/lib-ng-async-routes-ui (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In version 99.99.4, index.js sen...

MAL-2026-17874 Malicious code in @user-interface-common/common-styles (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 66.1.6 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

Malicious code in @mntv-analysis/ui (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 99.1.1 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...

Malicious code in @newspage/libx-amount (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In versions 99.99.4 and 99.99.41...

Malicious code in @mntv-analysis/workspaces-components (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 65.11.3 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', whic...

Malicious code in @newspage/lib-ng-async-routes-ui (npm)

npm user 'priyashareek' published this package in a dependency confusion campaign against the internal scopes @accenturecodefoundry and @newspage. The publisher used 99.99.x versions to outrank the internal packages. 0.0.0-stage and 99.99.1 are empty placeholders. In version 99.99.4, index.js sen...

Malicious code in @user-interface-common/common-styles (npm)

npm user 'conx3993' published this package in a dependency confusion campaign. It squats a name that looks like an internal package and uses version 66.1.6 so misconfigured resolvers pick it over the real one. Version 0.0.0-stage is an empty placeholder. A 'preinstall' hook runs 'index.js', which...