15803 matches found
OSV-2026-215 UNKNOWN READ in getTypeCacheHashTableBucket
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=482748215 Crash type: UNKNOWN READ Crash state: getTypeCacheHashTableBucket usbd.h...
PT-2026-7435
Name of the Vulnerable Software and Affected Versions Mongoid affected versions not specified Description Under specific conditions, processing a maliciously crafted Hash r value within the Mongoid::Criteria.from hash function may allow for the execution of arbitrary Ruby code. Recommendations At...
MongoDB Ruby Driver security vulnerabilities
The MongoDB Ruby Driver is an open-source Ruby library developed by MongoDB. There is a security vulnerability in the MongoDB Ruby Driver, which may allow arbitrary Ruby code to be executed when processing specially crafted Hash r types...
CVE-2026-2302: Permissive List of Allowed Inputs
Under specific conditions when processing a maliciously crafted value of type Hash r, Mongoid::Criteria.fromhash may allow for executing arbitrary Ruby code...
PT-2026-21012
Name of the Vulnerable Software and Affected Versions AMD Secure Processor affected versions not specified Description A timing discrepancy in the ASP and unreliable pointer dereferencing in the AMD Secure Processor firmware for GPUs allow a privileged attacker to perform a brute-force attack...
CVE-2026-2240
A vulnerability has been found in janet-lang janet up to 1.40.1. The impacted element is the function janetcpopfuncdef of the file src/core/compile.c. Such manipulation leads to out-of-bounds read. The attack must be carried out locally. The exploit has been disclosed to the public and may be use...
tinyusb:msc: Crash in getTypeCacheHashTableBucket
Project: https://github.com/hathach/tinyusb.git Detailed Report: https://oss-fuzz.com/testcase?key=5128151041900544 Project: tinyusb Fuzzing Engine: libFuzzer Fuzz Target: msc Job Type: libfuzzerubsantinyusb Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x55f4ab740694 Crash State:...
CVE-2025-68621
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticated remote attackers to recover HMAC...
CVE-2025-68621
Trilium Notes has a timing-attack vulnerability in the sync authentication endpoint (/api/login/sync) affecting versions before 0.101.0. Unauthenticated remote attackers can recover HMAC hashes byte-by-byte via statistical timing analysis, enabling complete authentication bypass and full read/wri...
CVE-2025-68621
Trilium Notes is an open-source, cross-platform hierarchical note taking application with focus on building large personal knowledge bases. Prior to 0.101.0, a critical timing attack vulnerability in Trilium's sync authentication endpoint allows unauthenticated remote attackers to recover HMAC...
Exploit for CVE-2026-25050
CVE-2026-25050 – Authentication Timing Attack This repository...
CVE-2026-2008
A vulnerability was detected in abhiphile fermat-mcp up to 47f11def1cd37e45dd060f30cdce346cbdbd6f0a. This vulnerability affects the function eqnchart of the file fmcp/mplmcp/core/eqnchart.py. Performing a manipulation of the argument equations results in code injection. It is possible to initiate...
Exploit for Unrestricted Upload of File with Dangerous Type in Hashthemes Hash_Form
No d...
📄 Microsoft Windows 10 / 11 NTLM Hash Disclosure Spoofing
Microsoft Windows 10 / 11 proof of concept exploit that generates a .library-ms XML file pointing to a network share UNC. When opened/imported on Windows, the library points to the specified UNC path. Exploit Title: windows 10/11 - NTLM Hash Disclosure Spoofing Date: 2025-10-06 Exploit Author:...
ROS-20260205-73-0035
A vulnerability in the hashaccept function of the crypto/algifhash.c component of the Linux kernel is related to memory re-release. Exploitation of the vulnerability may allow an attacker to gain access to sensitive data, compromise its integrity, and cause a denial of service...
EVE Seals Vault Key With SHA1 PCRs
Impact The vault key is sealed using SHA1 PCRs instead of SHA256 PCRs Thus an attacker with physical access to an EVE-OS device can try to brute force creating a kernel or rootfs image which produces the same SHA1 PCR but with malicious content. Patches Fixed in 9.4.3-lts and 10.1.0 Workarounds N...
GHSA-PHCG-H58R-GMCQ EVE Doesn't Measure Config Partition From 2 Fronts
Impact PCR14 is not included in the list of PCRs that seal/unseal the vault key. Additionally, the vault key uses SHA1 PCRs instead of SHA256. Thus an attacker with physical access can take out the disk, use a different computer to modify the files in the /config partition, and re-insert the disk...
Insufficiently Protected Credentials
Overview Affected versions of this package are vulnerable to Insufficiently Protected Credentials due to the use of SHA1 PCRs when sealing and unsealing the vault key. An attacker can bypass integrity checks and modify configuration files undetected by measured boot and remote attestation by...
AZL-77226 CVE-2026-23054 affecting package kernel for versions less than 6.6.126.1-1
In the Linux kernel, the following vulnerability has been resolved: net: hvnetvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndisfilterdeviceadd does not allocate an...
CVE-2026-23054
In the Linux kernel, the following vulnerability has been resolved: net: hvnetvsc: reject RSS hash key programming without RX indirection table RSS configuration requires a valid RX indirection table. When the device reports a single receive queue, rndisfilterdeviceadd does not allocate an...