CVE-2026-102930: Download of Code Without Integrity Check

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.7.12, downloadwheel accepts pip and setuptools seed wheels fetched for periodic updates or the --download option without checking their bytes against an authoritative digest equivalent to the embedded wheels'...

ROS-20260929-73-0072

The vulnerability of the ext4extmapblocks function in the fs/ext4/extents.c module of the Ext4 file system in the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a remote attacker to compromise the...

ROS-20260929-73-0085

The vulnerability of the handleoneuleextension function in the drivers/media/dvb-core/dvbnet.c file of the Linux kernel’s multimedia device driver is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to compromise t...

ROS-20260929-73-0048

The vulnerability of the vti6tnllookup function in the net/ipv6/ip6vti.c module of the IPv6 protocol implementation in the Linux operating system is related to incorrect checking of the unsafe equivalence of input data. Exploiting this vulnerability could allow an attacker, acting remotely, to...

ROS-20260929-73-0104

The vulnerability of the lbsfreeadapter function in the drivers/net/wireless/marvell/libertas/main.c module of the Marvell Linux kernel operating system is related to synchronization errors. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, an...

ROS-20260929-73-0173

The vulnerability of the e1000tbishouldaccept function in the drivers/net/ethernet/intel/e1000/e1000main.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to the use of a NULL pointer dereferencing. Exploiting this vulnerability could allow an attacker ...

ROS-20260929-73-0170

The vulnerability of the iavfconfigrssreg function in the driver/net/ethernet/intel/iavf/iavfmain.c file of the Intel Ethernet network adapter driver for the Linux operating system is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to...

Security Bulletin: This Power System update is being released to address CVE-2026-53006

Summary In the Linux kernel, processing corrupted IPv6 ICMPv6 messages can result in use-after-free which can result in loss of confidentiality, availability, and integrity. Vulnerability Details CVEID:CVE-2026-53006 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved:...

Security Bulletin: This Power System update is being released to address CVE-2026-43198

Summary An IPv6 listening socket handing an IPv4-mapped IPv6 connection request results in race condition which may result in loss of integrity, confidentiality, and availability. Vulnerability Details CVEID:CVE-2026-43198 DESCRIPTION: In the Linux kernel, the following vulnerability has been...

Incorrect Behavior Order: Validate Before Canonicalize

Overview PyJWT is a Python implementation of RFC 7519. Affected versions of this package are vulnerable to Incorrect Behavior Order: Validate Before Canonicalize via the load method in jwt/apijws.py, which accepts non-canonical base64url-encoded JWS segments. Because the library does not verify...

kernel: nvme-tcp: reject a read that transferred too few bytes

A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user application receives a mix of legitimate and stale data,...

Prototype Pollution

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via insufficiently hardened runtime option handling in the fetch and HTTP adapters lib/adapters/fetch.js, lib/adapters/http.js, and...

Prototype Pollution

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Prototype Pollution via insufficiently hardened runtime option handling in the fetch and HTTP adapters lib/adapters/fetch.js, lib/adapters/http.js, and related helpers,...

Improper Input Validation

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Input Validation via insufficient hardening of runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merge...

Improper Input Validation

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Improper Input Validation via insufficient hardening of runtime option handling in the fetch and HTTP adapters, where user-supplied fetchOptions are merged into the...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via insufficient hardening of runtime option handling in the fetch and HTTP adapters lib/adapters/fetch.js,...

Unintended Proxy or Intermediary ('Confused Deputy')

Overview org.webjars.npm:axios is a promise-based HTTP client for the browser and Node.js. Affected versions of this package are vulnerable to Unintended Proxy or Intermediary 'Confused Deputy' via insufficient hardening of runtime option handling in the fetch and HTTP adapters...

curl: curl: Cookie injection via malicious HTTP server using super cookies

A flaw was found in curl's cookie parsing logic. A malicious HTTP server can exploit this by setting 'super cookies' that bypass the Public Suffix List check. This allows an attacker-controlled origin to inject cookies that curl then transmits to unrelated third-party domains, leading to...

CVE-2024-37742

CVE-2024-37742: Clipboard Exploit in SEB ≤ 3.5.0 Windows This repository contains a proof-of-concept PoC for exploiting CVE-2024-37742, a vulnerability in Safe Exam Browser SEB ≤ 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the...

CVE-2026-50416-writeup-and-poc

CVE-2026-50416: One QWORD Too Many in the Desktop Heap On Windows 11 Insider build 10.0.28020.2149, the user mode mapping of the Win32k desktop heap exposed a raw kernel session pool pointer at offset 0x100. The read itself is almost offensively small: ULONG64 leaked = ULONG64 desktopheap + 0x100...