CVE-2026-119194

pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...

DEBIAN-CVE-2026-119194

pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...

Get-NetNTLM

Get-NetNTLM Powershell module to get the NetNTLMv2 hash of the current user Example Usage: PS C: Get-NetNTLM-Hash Administrator::desktop:1122334455667788:4FFFB35....F18337AB10:0101000000000000BD526...4006F0072006D000000000000000000...

Lotus Domino R5 and R6 WebMail - Information Disclosure

Lotus Domino R5 and R6 WebMail with 'Generate HTML for all fields' enabled which is by default allows remote attackers to read the HTML source to obtain sensitive information including the password hash in the HTTPPassword field, the password change date in the HTTPPasswordChangeDate field, and t...

CVE-2026-119194: pyasn1: pyasn1 is a generic ASN.1 library for Python

pyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a growing set even though only one-versus-multiple tag types must be distinguished. Attacker-controlled BER, CER, or DER input contains many distinct long...

AZL-111362 CVE-2026-99201 affecting package kernel 6.6.159.1-1

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

CVE-2026-99201

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

CVE-2026-99201

The Linux kernel contains a vulnerability where the netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Because /proc/net/netlink and socket diagnostics expose the table's bucket order, an unprivileged reader can distinguish equal buckets to recover the low bit...

CVE-2026-99201 netlink: avoid hashing the network namespace pointer

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

CVE-2026-99201 netlink: avoid hashing the network namespace pointer

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

PT-2026-129157

MONAI before 1.6.1 contains an insufficient integrity verification vulnerability in check hash that silently returns True when hash val is None, with MD5 as the default hash type. Attackers performing man-in-the-middle or registry compromise can substitute bundles, datasets, or model archives...

CVE-2026-99201: Linux: In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace…

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

PT-2026-128194

In the Linux kernel, the following vulnerability has been resolved: netlink: avoid hashing the network namespace pointer The netlink rhashtable key includes a raw struct net pointer and a user-controlled port ID. Both /proc/net/netlink and socket diagnostics expose the table's bucket order. By...

Updated weechat package fixes security vulnerabilities

Decompression Bomb in Relay WebSocket DoS. CVE-2026-53524 Non-Constant-Time Password Hash Comparison in Relay Authentication. CVE-2026-53525...

MGASA-2026-0561 Updated weechat package fixes security vulnerabilities

Decompression Bomb in Relay WebSocket DoS. CVE-2026-53524 Non-Constant-Time Password Hash Comparison in Relay Authentication. CVE-2026-53525...

Malicious code in string-target-mapper-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f356f513bed48330cd1a0538e53ac429f5570385e8b0bcc3fcc5c94876e437b package.json declares its sole dependency shard-writer-parser-mutex as a bare HTTPS URL to a non-registry host...

Malicious code in fetch-hash-cache-atomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa5c13f5b907c79079d9030292f1a6dac9d2f0ced56c2efe0e1bfd7021acdb4 package.json declares its sole dependency as a direct HTTPS URL https://artifacts.creditslib.com/npm/plugin-client-queue-field rather than a registry...

MAL-2026-18340 Malicious code in fetch-hash-cache-atomic (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7fa5c13f5b907c79079d9030292f1a6dac9d2f0ced56c2efe0e1bfd7021acdb4 package.json declares its sole dependency as a direct HTTPS URL https://artifacts.creditslib.com/npm/plugin-client-queue-field rather than a registry...

MAL-2026-18342 Malicious code in string-target-mapper-hash (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4f356f513bed48330cd1a0538e53ac429f5570385e8b0bcc3fcc5c94876e437b package.json declares its sole dependency shard-writer-parser-mutex as a bare HTTPS URL to a non-registry host...

Malware in fetch-hash-cache-atomic

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...