EUVD-2026-74835

Siyuan before v3.8.2 fails to apply publish-access filtering to embedded blocks before rendering in the /api/export/preview and /api/lute/copyStdMarkdown endpoints. Attackers with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by accessing publ...

Malicious Package

Overview @fyxzpediaa/baileys is a malicious package. This package contains malicious code. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship. Remediation Avoid using all malicious instances of t...

renode v1.17.0

Renode Copyright c 2010-2026 Antmicro What is Renode? Renode was created by Antmicro as a virtual development tool for multi-node embedded networks both wired and wireless and is intended to enable a scalable workflow for creating effective, tested and secure IoT systems. With Renode, developing,...

CVE-2026-6485

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485 UEFI BIOS embedded Shell can be used to bypass Secure Boot

UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands or startup scripts...

CVE-2026-6485

CVE-2026-6485 affects UEFI BIOS firmware that embeds the TianoCore EDK II UEFI Shell in SPI Flash. A logic error in the Shell boot option removal process allows an attacker with root privileges to create multiple boot entries, bypassing the Secure Boot check and gaining access to the Shell's phys...

openSUSE 16 Security Update : supergfxctl (openSUSE-SU-2026:21794-1)

The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21794-1 advisory. Changes in supergfxctl: - Fixed security issue in embedded dependency 'bytes' CVE-2026-25541 boo1274336 - Update to version 1762634235.5d503b1: Added...

PT-2026-88947

Name of the Vulnerable Software and Affected Versions Siyuan versions prior to 3.8.2 Description Insufficient publish-access filtering for embedded blocks occurs during rendering. Users with reader access can retrieve the full rendered content of private, hidden, or publish-disabled blocks by...

The vulnerability of the iio_buffer_enqueue_dmabuf() function in the drivers/iio/industrialio-buffer.c file of various types of embedded sensor sensors in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the iiobufferenqueuedmabuf function in the drivers/iio/industrialio-buffer.c module, which is used by various types of embedded sensor drivers in Linux operating systems, involves a flaw where resources are not released after their useful period has ended. Exploiting this...

SAML SSO - Service Provider - Moderately critical - Embedded credentials - SA-CONTRIB-2026-148

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

PT-2026-89249

This module allows you to configure your Drupal site as a SAML 2.0 Service Provider so that users can authenticate through an external identity provider. The module contains embedded credentials used by the functionality provided by the module. Under certain circumstances, these credentials could...

CVE-2026-69430

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69430

CVE-2026-69430 is a use after free vulnerability in the Windows Embedded Mode Service that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 base score is 7.0 (HIGH) with a vector of AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating the attack requires local access ...

EUVD-2026-73500

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

Windows Embedded Mode Service Elevation of Privilege Vulnerability

Use after free in Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally...

CVE-2026-67367

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 All versions V3.1.13, SIMOVE Fleetmanager V3.2 All versions V3.2.4, SIMOVE Fleetmanager V3.3 All versions V3.3.2, SIMOVE Fleetmanager V4.0 All versions V4.0.1, SIPLANT V1.7 All versions, SIPLANT V2.2 All versions, SIPLANT V3.0 All...

CVE-2026-67367

A vulnerability has been identified in SIMOVE Fleetmanager V3.1 All versions V3.1.13, SIMOVE Fleetmanager V3.2 All versions V3.2.4, SIMOVE Fleetmanager V3.3 All versions V3.3.2, SIMOVE Fleetmanager V4.0 All versions V4.0.1, SIPLANT V1.7 All versions, SIPLANT V2.2 All versions, SIPLANT V3.0 All...

NERVE Attacks: Breaking AI-Powered Brain-Computer Interfaces

The rapid integration of AI into human-centred systems such as Brain-Computer Interfaces BCIs has created a poorly understood attack surface linking neural signals to physical systems. Exploits in this domain threaten cognitive autonomy, mental privacy, and physical safety, from neural data...

PT-2026-87013

Name of the Vulnerable Software and Affected Versions SIMOVE Fleetmanager versions prior to 3.1.13 SIMOVE Fleetmanager versions prior to 3.2.4 SIMOVE Fleetmanager versions prior to 3.3.2 SIMOVE Fleetmanager versions prior to 4.0.1 SIPLANT version 1.7 SIPLANT version 2.2 SIPLANT version 3.0 SIPLAN...

PT-2026-87461

Name of the Vulnerable Software and Affected Versions Windows Embedded Mode Service affected versions not specified Description A use-after-free condition in the Windows Embedded Mode Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue...