CVE-2026-92160

The F´ (F Prime) framework, used for spaceflight and embedded software, is vulnerable to an integer overflow in the Svc::FileDownlink SendPartial function prior to version 4.3.0 . Specifically, a wrapping sum of a provided length and a startOffset can bypass file-range validation, leading to a co...

CVE-2026-92155

The F´ (F Prime) framework, used for spaceflight and embedded software, contains a vulnerability in the Fw::FilePacket deserialization used by Svc::FileUplink . Prior to version 4.2.0 , the system fails to validate the range of the byte cast to the Type enum during Header deserialization. If a ne...

CVE-2026-92150

The F´ (F Prime) framework, used for spaceflight and embedded software, contains a vulnerability in the Svc::GenericHub fromBufferDriver_handler deserialization. The issue is caused by the use of FW_ASSERT for externally influenced deserialization status and type validation, which allows a comman...

CVE-2026-92154

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a file size bounds bypass in Svc::FileUplink prior to version 4.2.0 . The vulnerability stems from an unsigned integer overflow during DATA packet validation , where the component uses wrapping U32 arith...

CVE-2026-92158

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FpySequencer STORE directive stack write validation. Prior to version 4.2.0 , the bounds check fails to account for integer wraparound when adding attacker-c...

CVE-2026-92159

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a vulnerability in the Svc::TlmPacketizer component prior to version 4.3.0 . The TlmRecv_handler function performs a fixed-slot copy of telemetry data without verifying that the runtime value fits within...

CVE-2026-92156 F´: EventManager asserts on legal oversized LogBuffer values delivered over the standard GenericHub event bridge

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueueinternalInterfaceHandler packetization is vulnerable because EventManager accepts up to the framework LogBuffer maximum, but packet...

CVE-2026-92156

The F´ (F Prime) framework, used for spaceflight and embedded software, contains a vulnerability in Svc::EventManager 's loqQueue_internalInterfaceHandler packetization prior to version 4.3.0 . The EventManager accepts buffers up to the framework's LogBuffer maximum; however, because metadata (pa...

EUVD-2026-101408

F´ F Prime is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::EventManager loqQueueinternalInterfaceHandler packetization is vulnerable because EventManager accepts up to the framework LogBuffer maximum, but packet...

CVE-2026-92157

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains an integer overflow vulnerability in the Svc::FileDownlink SendPartial range validation prior to version 4.3.0 . The root cause is unchecked arithmetic where startOffset plus length can wrap around, resu...

CVE-2026-92152

The F´ (F Prime) framework, used for spaceflight and embedded software, contains an unvalidated port index vulnerability in Svc::GenericHub (versions 4.1.0 through 4.2.0). The root cause is the lack of an explicit range check on the deserialized port field when passed to functions like serialOut_...

CVE-2026-92153

The F´ (F Prime) framework, used for spaceflight and embedded software, contains an arbitrary file write vulnerability in Svc::FileUplink prior to version 4.3.0 . The root cause is that the system copies the destinationPath from Fw::FilePacket::StartPacket and opens it for writing without canonic...

CVE-2026-92151

The F´ (F Prime) framework, used for spaceflight and embedded software applications, contains a vulnerability in the Svc::Ccsds::SpacePacketDeframer component prior to version 4.2.0 . The dataIn_handler incorrectly uses FW_ASSERT instead of rejecting the buffer when a CCSDS telecommand frame resu...

FMD Android

FMD Android Find your device via SMS, instant messengers, or a web interface FMD Server. FMD allows you to locate, ring, wipe and issue other commands to your device when it's lost. It aims to be a secure open source alternative to Google's Find My Device. Why? I lost my brand new phone last week...

B2R2

B2R2 B2R2 is a fully managed binary analysis framework written in F. It provides a rich set of algorithms, functions, and tools for reverse engineering, program analysis, and binary-level inspection. The name B2R2 takes inspiration from R2-D2, the iconic robot from Star Wars. Originally named B2-...

Tylium

Tylium Primary data pipelines for intrusion detection, security analytics and threat hunting These files contain configuration for producing EDR endpoint detection and response data in addition to standard system logs. These configurations enable the production of these data streams using F/OSS...

F-Scrack

To prevent this script from being maliciously used, this project has been deleted...

F-logic DataCube3 - SQL Injection

SQL injection vulnerability in f-logic datacube3 v.1.0 allows a remote attacker to obtain sensitive information via the reqid parameter. id: CVE-2024-31750 info: name: F-logic DataCube3 - SQL Injection author: DhiyaneshDK severity: high description: | SQL injection vulnerability in f-logic...

see

Sandboxed Execution Environment :Source: https://github.com/F-Secure/see :Documentation: https://see.readthedocs.io :Download: https://pypi.python.org/pypi/python-see |travis badge| |docs badge| .. |travis badge| image:: https://travis-ci.org/F-Secure/see.svg?branch=master :target:...

CVE-2020-27976

CVE-2020-27976 Exploit osCommerce Phoenix CE . This has produced the best results during testing. Newlines in the payload are replaced with spaces before upload. ================== Sources: https://www.tenable.com/cve/CVE-2020-27976 https://herolab.usd.de/security-advisories/usd-2020-0026/...