156242 matches found
CLEANSTART-2026-IP93838 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-DP99437 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
PT-2026-102435
Name of the Vulnerable Software and Affected Versions Netcore NAP930 version 0.1.241010.141410 Description Remote OS command injection is possible within the Network Tools CGI component. The issue exists in the eval function of the '/www/cgi-bin/network tools' endpoint, where improper handling of...
CVE-2026-95305: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to spoof UI elements via crafted network traffic. Chromium security severity: Low...
CVE-2026-101354: Stack-based Buffer Overflow
A security flaw has been discovered in FAST FAC1203R 202001162.0.4. The affected element is the function tWlanTask of the component MmtAtePrase Parser. Performing a manipulation results in stack-based buffer overflow. The attacker must have access to the local network to execute the attack. The...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95300): chromium -- security fixes
Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
PT-2026-102874
An authentication bypass vulnerability exists in the PAPI protocol of HPE Networking Instant ON APs that could allow an unauthenticated adjacent attacker to circumvent existing authentication controls. Successful exploitation could allow an attacker to circumvent certain existing authentication...
ROS-20260929-73-0064
The vulnerability of the gsusbxmitcallback function in the drivers/net/can/usb/gsusb.c file of the Linux network device driver module is related to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to compromise the...
CVE-2026-95376: Externally Controlled Reference to a Resource in Another Sphere
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-95394
Microsoft Network Monitor file parser large loop in 4.6.0 to 4.6.8 and 4.4.0 to 4.4.18 allows denial of service...
ROS-20260929-73-0172
The vulnerability of the teamqueueoverrideenabledcheck function in the drivers/net/team/teamcore.c file of the Linux kernel’s network device driver is related to the occurrence of operations outside of memory buffers. Exploiting this vulnerability could allow an attacker to compromise the...
ROS-20260929-73-0096
The vulnerability of the aqc111suspend function in the drivers/net/usb/aqc111.c module of the Linux USB network adapter driver leads to mutual locking. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
Behavior-Centric Malware Classification with Fine-Grained Malicious Logic Localization
Effective malware analysis requires understanding not only whether a program is malicious, but also which behaviors it exhibits and where those behaviors originate in the code. Existing machine-learning-based malware detectors largely operate as black boxes, providing limited insight into the...
When Cyber Scoring Systems Diverge: An Empirical Comparison
Vulnerability scoring systems underpin cyber patch prioritization and risk management, but their comparative behavior is almost always assessed in the abstract, through correlation studies in IT vulnerability databases, rather than by the operational consequences they produce when embedded in a...
ROS-20260929-73-0090
The vulnerability of the fore200eopen function in the drivers/atm/fore200e.c file of the Linux kernel’s network adapter driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality,...
CVE-2026-100297: Server-Side Request Forgery (SSRF)
In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network check function can be triggered to probe arbitrary hosts from the device’s internal network. This may expose internal information or leak data via DNS queries...
CVE-2026-102240: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was found in Netcore NAP930 0.1.241010.141410. This affects the function eval of the file /www/cgi-bin/networktools of the component Network Tools CGI. The manipulation of the argument sid results in os command injection. The attack may be performed from remote. The exploit has be...
ROS-20260929-73-0058
The vulnerability of the jumbofrm function in the drivers/net/ethernet/stmicro/stmmac/chainmode.c file of the Ethernet network adapter driver for the Linux operating system is related to a numerical overflow issue. Exploiting this vulnerability could allow an attacker to compromise the...
PT-2026-102630
The access to the service menu is obfuscated, but possible with only physical access. This menu exposes sensitive information such as serial numbers, MAC addresses, and WiFi network and password...
FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95376): chromium -- security fixes
Externally controlled reference in DevTools in Google Chrome prior to 154.0.8037.57 allowed an adjacent attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...