262 matches found
CVE-2026-23005-Matter-Commissioning-Code-Brute-Force-Without-Rate-Limit
CVE-2026-23005 – Matter Commissioning Code Brute‑Force Without Rate Limit Program Code Python Matter simulation mattercommissioningsim.py import random realcode = random.randint10000000, 99999999 def attemptjoincodeattempt: Simulate joining: no delay, no lockout if codeattempt == realcode:...
CVE-2021-23639
Overview md-to-pdf is a CLI tool for converting Markdown files to PDF. Affected versions of this package are vulnerable to Remote Code Execution RCE due to utilizing the library gray-matter to parse front matter content, without disabling the JS engine. Usage: python3 cve-2021-23639.py targerurl...
CVE-2026-78847
A flaw was found in gray-matter. The component uses the eval function to parse document metadata front matter specified as JavaScript. An attacker who supplies malicious input containing JavaScript front matter can exploit this behavior to achieve arbitrary code execution on the target system...
SUSE CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
EUVD-2026-84242
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...
EUVD-2026-84241
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
CVE-2026-78806
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
PT-2026-96303
Name of the Vulnerable Software and Affected Versions Matter Project Chip version 1.5.1 Description An implementation gap in the Matter Standard Specification allows a local attacker to obtain sensitive information. This occurs through the PerformCommissioningStep function within the...
CVE-2026-78806
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...
CVE-2026-78806
An issue in the Matter Standard Specification-Implementation gap v1.5.1 (Matter Project Chip V1.5.1) allows a local attacker to obtain sensitive information . The vulnerability exists within the PerformCommissioningStep function in the ChipDeviceController.cpp component. No specific exploit detai...
CVE-2026-78806: Exposure of Sensitive Information to an Unauthorized Actor
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...
CVE-2026-78806
An issue in Matter Standard Specification-Implementation gap v1.5.1 Matter Project Chip V1.5.1 allows a local attacker to obtain sensitive information via the PerformCommissioningStep function in the ChipDeviceController.cpp component...
PT-2026-96304
Name of the Vulnerable Software and Affected Versions gray-matter affected versions not specified Description An issue in the JavaScript engine located in lib/engines.js uses the eval function to parse front matter when the language is set to js/javascript, which can lead to arbitrary code...
CVE-2026-78847: Improper Neutralization of Directives in Dynamically Evaluated Code
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
CVE-2026-78847
All versions of gray-matter (verified on version 4.0.3 ) are vulnerable to arbitrary code execution. The flaw exists in the JavaScript engine located in lib/engines.js , where the application uses eval() to parse front matter when the language is set to js/javascript . While the documents do not ...
CVE-2026-78847
An issue in gray-matter All versions verified on 4.0.3 allows the JavaScript engine in lib/engines.js using eval to parse front matter when language is js/javascript.This allows arbitrary code execution...
Identity Visibility in 2026: The Foundation of Identity Security
Identity visibility is a starting point for modern identity security, because stolen and misused credentials are among the most frequently reported initial access vectors in breach research, including Verizon's annual Data Breach Investigations Report. This article explains what identity visibili...