CVE-2026-11743: Out-of-bounds Read

The SF32LB MPI QSPI NOR flash driver drivers/flash/flashsf32lbmpiqspinor.c validated the flash offset and length on its read and write paths with the test offset + size data-size. Because offset is a signed offt while size is unsigned, a negative offset is converted to a large unsigned value and...

CVE-2026-9031: Improper Input Validation

An input validation vulnerability exists in the HTTP-WRITEOEM handler due to insufficient validation of user-supplied data before it is processed by internal flash-write handling logic. Successful exploitation may cause httpd process or device to crash, resulting in loss of access to the web...

PT-2026-69147

Name of the Vulnerable Software and Affected Versions SF32LB MPI QSPI NOR flash driver affected versions not specified Description The SF32LB MPI QSPI NOR flash driver in drivers/flash/flash sf32lb mpi qspi nor.c contains an integer signedness error in its read and write paths. The driver validat...

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

ROS-20260803-73-0024

The vulnerability of the initf2fsfs function in the fs/f2fs/super.c module of the F2FS file system support module in Linux kernel relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to trigger a service failure...

CVE-2026-67673

A stack-based buffer overflow vulnerability exists in the cmdedl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fwflash command, where the argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical...

PT-2026-67551

Name of the Vulnerable Software and Affected Versions OreSat Firmware version 1.0 Description A stack-based buffer overflow occurs in the cmd edl function when processing the edl fw flash command. The issue arises because the argument is copied to a 64-byte stack buffer using memcpy without...

Fake Flash Player installs AtlasRAT

Researchers have described a campaign that delivers a remote access Trojan RAT called AtlasRAT through a fake Flash Player installer. People still go looking for “Flash player” because a surprising amount of content and software was built around Flash and never properly migrated. Users often just...

WordPress 1 flash gallery listing Detection

Searches for sensitive directories present in the 1-flash-gallery plugin. !/usr/bin/env python3 -- coding: utf-8 -- """Searches for sensitive directories present in the 1-flash-gallery plugin.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

GRAND FlAGallery 1.57 - Cross-Site Scripting Detection

A cross-site scripting XSS vulnerability in facebook.php in the GRAND FlAGallery plugin flash-album-gallery before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter. !/usr/bin/env python3 -- coding: utf-8 -- """A cross-site scripting XSS...

Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost

Microsoft has launched its first cybersecurity-specific model inside MDASH , its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its curre...

mt6897-unlock-attempt

UnlockPOCOX6Pro — duchamp POCO X6 Pro 5G recovery research...

Linux UFS Kernel Heap Buffer Overflow DoS

The vulnerability of the ufshcdmcqpollcqelock function in the drivers/ufs/core/ufs-mcq.c module related to UFS host controllers in the Linux operating system is associated with the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsMoveInlinedirents function in the fs/f2fs/inline.c module of the F2FS file system in the Linux operating system involves the disclosure of confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...

Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities

Google's DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber , a specialized artificial intelligence AI model built atop 3.5 Flash that's designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model will be exclusively...

SUSE CVE-2026-63964

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: ccg: reject firmware images without a ':' record header doflash locates the first .cyacd record with p = strnchrfw-data, fw-size, ':'; while p eof s = strnchrp + 1, eof - p - 1, ':'; ... If the firmware image...

SUSE CVE-2026-63997

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

SUSE CVE-2026-63998

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...