@atlantjs/backend (>=11.0.11, <=11.0.79), @atlantjs/database (>=2.0.0, <=2.1.32) +4 more potentially affected by unknown CVE via typeorm (1.0.0)

typeorm NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on typeorm and may be impacted: - @atlantjs/backend =11.0.11, =2.0.0, =0.48.60, =2.1.5, =1.1.43, =1.1.45 Source cves: unknown CVE Source advisory: SNYK:JS-TYPEORM-18170276...

CVE-2026-56816 Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; decodeFrame trusts payLoadLength, allowing an...

CVE-2026-56816 Netty: Memory Exhaustion via HTTP/3 Reserved Frame Types

Netty is a network application framework for development of protocol servers and clients. Prior to 4.2.16.Final, Netty's Http3FrameCodec buffers incoming data for HTTP/3 reserved frame types up to the wire-specified payload length without limits; decodeFrame trusts payLoadLength, allowing an...

CVE-2026-62546

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.8-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-62534

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Web Utilities. Supported versions that are affected are 12.2.11-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Applications...

CVE-2026-56746 Netty has a Security Control Bypass via CORS Short-Circuit Failure

Netty is a network application framework for development of protocol servers and clients. Versions 4.2.0.Final through 4.2.15.Final and 4.1.0.Final through 4.1.135.Final, are vulnerable to security control bypass during the origin evaluation process. CorsHandler provides a shortCircuit...

CVE-2026-56746

Netty (versions 4.2.0.Final–4.2.15.Final and 4.1.0.Final–4.1.135.Final) contains a security control bypass in CorsHandler’s origin evaluation due to a logical operator error. An attacker can bypass the short-circuit protection by sending Origin: null, causing unauthorized requests to reach the ba...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

AZL-93312 CVE-2026-47143 affecting package rust for versions less than 1.90.0-10

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

UBUNTU-CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-47143

Capstone is a disassembly framework. Versions prior to 6.0.0-Alpha8 and 5.0.8 have a NULL pointer dereference in modRMRequired and decode when disassembling 3DNow! opcodes 0F 0F in builds compiled with -DCAPSTONEX86REDUCE, allowing a remote attacker to crash any application using the reduced X86...

CVE-2026-63911

A flaw was found in the Linux kernel's xfrm: iptfs component. This vulnerability arises from incorrect handling of runtime data when cloning Security Associations SAs. If a state migration fails, the cloned state can improperly share memory with the original, leading to use-after-free and...

metasploit-framework v6.4.144

Metasploit Framework The Metasploit Framework is an open-source tool released under a BSD-style license. For detailed licensing information, refer to the COPYING file. Latest Version Access the latest version of Metasploit from the Nightly Installers page. Documentation Comprehensive documentatio...

angr v9.3.0

angr angr is a platform-agnostic binary analysis framework. It is brought to you by the Computer Security Lab at UC Santa Barbara, SEFCOM at Arizona State University, their associated CTF team, Shellphish, the open source community, and @rhelmot. Project Links Homepage: https://angr.io Project...

lback-framework (>=0.1.0, <=1.0.1) potentially affected by CVE-2026-59890 via setuptools (80.3.0)

setuptools PYPI version 80.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - lback-framework =0.1.0, =1.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

EUVD-2026-42326

hono/jsx does not isolate context per request, leading to cross-request data disclosure...

EUVD-2026-42327

Hono: Server-Side XSS via JSX Escaping Bypass in cx Utility...

homeassistant-stubs (>=2026.5.0b0, <=2026.6.0b4), pytest-homeassistant-custom-component (>=0.13.326, <=0.13.335) +1 more potentially affected by CVE-2026-64825 via homeassistant (>=2026.5.0b0, <=2026.6.0b4)

homeassistant PYPI version =2026.5.0b0, =2026.5.0b0, =0.13.326, =1.0.15, =1.0.24 Source cves: CVE-2026-64825 Source advisory: OSV:GHSA-5HXG-R395-FQXX...

homeassistant-stubs (>=2026.5.0b0, <=2026.6.0b4), pytest-homeassistant-custom-component (>=0.13.326, <=0.13.335) +1 more potentially affected by CVE-2026-64825 via homeassistant (>=2026.5.0b0, <=2026.6.0b4)

homeassistant PYPI version =2026.5.0b0, =2026.5.0b0, =0.13.326, =1.0.15, =1.0.24 Source cves: CVE-2026-64825 Source advisory: GHSA-5HXG-R395-FQXX...

Kittysploit-framework V1.1.2

KittySploit Framework The Next-Gen Exploitation Engine for Modern Red Teams Website • Wiki • Usage Guide • Marketplace Modular • Extensible • AI-Powered Why KittySploit? While traditional tools struggle with modern web architectures and automated defense, KittySploit redefines the offensive...