monkey

Monkey documentation This folder contains the Monkey Documentation site. For more information see content/development/contribute-documentation.md...

CVE-2026-107041

A flaw was found in Island. Insecure permission controls in the FeatureActionActivity component allow an unauthorized attacker to arbitrarily force the device to freeze. This vulnerability leads to a Denial of Service DoS, rendering the device unresponsive...

Fedora 45 : unbound (2026-7b16c1d7fc)

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-7b16c1d7fc advisory. Update to 1.26.2 rhbz2558169 Security fixes from the upstream changelog: - Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

OASISFENG Island security vulnerability

There is a security vulnerability on oasisfeng Island. This vulnerability stems from insecure permissions in the FeatureActionActivity component, which may allow unauthorized attackers to forcibly freeze devices at will, resulting in a denial of service...

PT-2026-132310

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

The Oasis Feng Island application (version 51801) is vulnerable to a Denial of Service (DoS) due to insecure permissions in the FeatureActionActivity component. This security flaw, categorized under CWE-926 (Improper Export of Android Application Components), allows unauthorized attackers to arbi...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041: n/a: Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized…

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

CVE-2026-107041

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

EUVD-2026-113165

Insecure permissions in the FeatureActionActivity component of Oasis Feng Island versionCode 51801 allows unauthorized attackers to arbitrarily force a freeze in the device, leading to a Denial of Service DoS...

Fedora 44 : unbound (2026-9142230324)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-9142230324 advisory. Update to 1.26.2 rhbz2558169 Security fixes from the upstream changelog: - Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free on...

CentOS Linux 7 [TuxCare] Security Update: unbound / unbound-devel / unbound-libs / unbound-python Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792811393)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792811393 advisory. - In NLnet Labs Unbound up to and including version 1.26.1, an observable cache-level side-channel can be exposed with...

CLSA-2026-1792810562 unbound: Fix of 6 CVEs

CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache Rebirthday attack - CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation ghost domain - CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus -...

CLSA-2026-1792810088 unbound: Fix of 6 CVEs

CVE-2025-5994: do not cache non-ECS answers to ECS queries in the subnet cache Rebirthday attack - CVE-2026-40622: limit the TTL of a higher-trust NS rrset replacing a cached delegation ghost domain - CVE-2026-50106: treat an unsigned parent denial of an island trust anchor as bogus -...

SUSE CVE-2026-50106

When NLnet Labs Unbound up to and including version 1.26.1 is configured with both a root trust anchor and an additional 'trust-anchor:' for an island-of-security zone whose parent is provably insecure under the root chain, a malicious actor who can deliver one forged NXDOMAIN response for a name...

EUVD-2026-107417

Nuxt server islands render useHeadSafe input without sanitisation...

Cross-site Scripting (XSS)

Overview org.webjars.npm:nuxt is a Affected versions of this package are vulnerable to Cross-site Scripting XSS via the server island head rendering pipeline in packages/nitro-server/src/runtime/handlers/island.ts, where head entries are serialized without applying the useHeadSafe allowlist. An...

Unbound 1.26.1 Multiple Vulnerabilities

Unbound versions through 1.26.1 contain a DNS-over-QUIC use-after-free, two DNSSEC trust-island bypasses, an aggregate decompression-work issue, and a cache side channel. Version 1.26.2 fixes these issues...