Malicious code in @hrmony/pladddform-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8f03abfe6149423144b6d3143a66cbca7925bb6eb736b1ece350d5a344684eb9 @hrmony/[email protected] ships an index.js whose top-level code, executed on require/import, POSTs to the hardcoded attacker host...

Malicious code in @hrmony/gutscheinverwaltung (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05705e4815a7ce926aad55136e379d3f901ad923a0fcb7f4002cf16e6cd78c56 On module load, the package performs top-level fetches against the AWS EC2 Instance Metadata Service using IMDSv2 requesting a token, then reading...

USN-8846-1 libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

USN-8846-1: libheif vulnerabilities

Yuqi Qiu and Xiang Li discovered that libheif incorrectly handled certain compressed metadata. A remote attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. CVE-2026-84384 Yuqi Qiu and Xiang Li discovered that libheif...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG 이미지 처리 메모리 손상 요약 Apple의 이미지 처리RawCamera.bundle의 취약점은 iOS 18.6.1 및 macOS 에 영향을 미칩니다. 이 문제는 DNG 파일에 불일치하는 TIFF 메타데이터 와 JPEG 무손실 매개변수 가 포함될 때 발생하여 메모리 손상을 초래합니다. 원인 TIFF 헤더는 SamplesPerPixel예상 채널 수을 정의합니다. JPEG 무손실은 SOF3 구성 요소 수실제 채널 수를 정의합니다. 이들이 일치하지 않으면...

CVE-2026-97416

A flaw was found in the Linux kernel's Btrfs file system. An attacker could exploit this vulnerability by mounting a corrupted file system image and initiating a balance operation. Due to a missing validation check when querying block group metadata, the kernel triggers a null pointer dereference...

CVE-2026-100705

A flaw was found in Kyverno. Due to missing egress network filtering in its legacy API call handler, an attacker with permission to author policies or submit templated resources can trigger Server-Side Request Forgery SSRF. This vulnerability allows the attacker to force Kyverno to issue arbitrar...

CVE-2026-34207

CVE-2026-34207 SSRF 필터는 호스트명 텍스트를 검사했지만, 실제 목적지는 나중에 DNS에 의해 결정되었습니다. 이 간격으로 인해 공격자가 제어하는 Webhook URL이 루프백, 메타데이터 및 사설 네트워크 대상에 도달할 수 있었습니다. 소개 저는 오픈소스 챗봇 빌더인 Typebot 을 검토하면서 간단한 보안 질문을 염두에 두고 이 문제를 발견했습니다. SSRF 보호가 호스트명 텍스트를 검증하지만 실제 목적지는 나중에 DNS에 의해 결정된다면 어떻게 될까? 이 경우, 그 질문은 실제 버그로 이어졌습니다...

ntoskrnl-metadata

ntoskrnl-metadata Windows ntoskrnl.exe 이진 파일에서 중요 커널 메타데이터를 추출하기 위한 IDA Python 스크립트입니다. 이 도구는 CVE-2026-40369 및 기타 커널 취약점을 대상으로 하는 익스플로잇 개발에 필요한 함수 RVA와 EPROCESS 구조체 오프셋을 자동으로 추출합니다. 목적 이 도구는 익스플로잇 페이로드에 하드코딩해야 하는 버전별 커널 메타데이터를 자동으로 추출하여 CVE-2026-40369 에 대한 성공적인 익스플로잇을 컴파일하는 데 도움을 줍니다. 추출된 값은 다양한...

CVE-2026-46331

PACKETEDITMEME - CVE-2026-46331 net/sched actpedit 부분 COW 페이지 캐시 손상 범인 커밋 899ee91156e5, v5.18부터 v7.1-rc7에서 수정됨. packeteditmeme.c는 이를 권한 없는 로컬 루트로 변환합니다: userns CAPNETADMIN 자식 프로세스가 setuid-root 바이너리의 캐시된 ELF 메타데이터를 setgid0+setuid0+execve"/bin/sh" 셸코드로 덮어씁니다. make ./packeteditmeme ./packeteditmeme...

CVE-2026-98065

A flaw was found in the Linux kernel's BPF Berkeley Packet Filter subsystem. A local user can cause a Denial of Service DoS by creating a hash map lacking key type information and reading it through the BPF file system. Due to missing validation of BPF Type Format BTF metadata, the kernel attempt...

EUVD-2026-88563

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames API to list frame records from monitors they are denied access to, disclosing event and frame metadata across monitor...

QUIC STREAM Fragment Metadata DoS

Issue summary: QUIC process may keep memory for QUIC packet buffer for much longer period than necessary. Impact summary: Remote peer can exploit this vulnerability by sending maliciously crafted packets, making the local QUIC stack to keep the memory for packet buffers allocated. The time for...

CVE-2026-101126: Improper Limitation of a Pathname to a Restricted Directory

Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms 2.4.3.4 - The final form submission processes JSON arrays per upload field, checking only that IDs are numeric. Client-supplied filenames and display names are trusted directly, introducing potential cross-session claiming...

Amazon Linux 2 : 389-ds-base (ALAS-2026-3926)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3926 advisory. A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into t...

PT-2026-102705

Name of the Vulnerable Software and Affected Versions Balbooa Forms versions prior to 2.4.3.4 Description The final form submission processes JSON arrays for each upload field but only verifies that IDs are numeric. Because client-supplied filenames and display names are trusted directly, the...

CVE-2026-97549

A flaw was found in the Linux kernel's XFS file system. An incorrect block calculation during the online repair of shortform directories and extended attributes causes transaction space to be under-reserved. A local user capable of triggering metadata repair operations can exploit this flaw to...

CVE-2026-102297

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames API to list frame records from monitors they are denied access to, disclosing event and frame metadata across monitor...

CVE-2026-102297

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames API to list frame records from monitors they are denied access to, disclosing event and frame metadata across monitor...

CVE-2026-102297 ZoneMinder before 1.38.4 Incorrect Authorization in frames API index

ZoneMinder before 1.38.4 fails to apply per-monitor access restrictions in the FramesController index endpoint. Authenticated users with Events view permission can call the frames API to list frame records from monitors they are denied access to, disclosing event and frame metadata across monitor...