5840 matches found
ECHO-0062-6C67-8811
Bulletin has no description...
CVE-2026-72913 Kitty: Command injection into the child shell via chained @kitty-echo + @kitty-ssh DCS escape sequences
Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...
CVE-2026-72913
Kitty is a cross-platform GPU based terminal. Prior to 0.48.2, the @kitty-echo and @kitty-ssh DCS handlers in kitty/window.py write unauthenticated data to the child shell's stdin, where handleremoteecho accepts printable shell command characters and handleremotessh calls getsshdata in...
ECHO-9658-3093-2999
Bulletin has no description...
CVE-2026-68300 sctp: auth: verify auth requirement when auth_chunk is NULL
In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping authentication. This is incorrect when: 1. skbclone failed in the BH...
EUVD-2026-55401
In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when authchunk is NULL sctpauthchunkverify returns true unconditionally when chunk-authchunk is NULL, silently skipping authentication. This is incorrect when: 1. skbclone failed in the BH...
CVE-2026-68300
Summary: CVE-2026-68300 in the Linux kernel concerns SCTP authentication. The function sctp_auth_chunk_verify() incorrectly returns true when auth_chunk is NULL, allowing authentication to be bypassed under certain conditions (e.g., skb_clone() failure in BH path or absence of an AUTH before COOK...
ECHO-8D4E-0265-D9A8
Bulletin has no description...
PT-2026-69981
Name of the Vulnerable Software and Affected Versions Kitty versions prior to 0.48.2 Description In the kitty/window.py file, the @kitty-echo and @kitty-ssh DCS handlers write unauthenticated data to the child shell's stdin. The handle remote echo function accepts printable shell command...
ECHO-12E4-CC24-CB8A
Bulletin has no description...
gtp: check skb_pull_data() return in gtp1u_send_echo_resp()
...
ECHO-531E-0C06-BDD3
Bulletin has no description...
ECHO-5950-3CA7-8A02
Bulletin has no description...
ECHO-2294-B00A-6417
Bulletin has no description...
ECHO-0460-B582-014C
Bulletin has no description...
ECHO-2965-6B21-A379
Bulletin has no description...
ECHO-996A-0359-856A
Bulletin has no description...
ECHO-D342-478D-0776
Bulletin has no description...