7055 matches found
PT-2026-69947
Name of the Vulnerable Software and Affected Versions UpdateHub affected versions not specified Description The UpdateHub firmware-update agent contains a flaw in its probe handler z impl updatehub probe within subsys/mgmt/updatehub/updatehub.c. The handler parses JSON metadata from an update...
CVE-2026-68210: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmigraphinit registers the async notifier before dcmiprobe toggles the reset line. If resetcontrolassert or resetcontroldeassert fails afterwards, probe returns through...
PT-2026-69607
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the Linux kernel where the vpe probe function returns -ENODEV when the vpe top resource is missing, even after v4l2 device register has successfully completed. Because...
SLAC: Access-Driven CPU-To-GPU Side-Channel Attacks Via System-Level Cache on Apple Silicon
Modern heterogeneous System-on-Chip designs integrate CPU cores and a GPU that share a last-level cache LLC or system-level cache SLC. This sharing exposes a new cross-domain attack surface, and existing attacks on integrated platforms either exploit coarse-grained cache-occupancy contention or...
WebSocket / SSE Auth Probe
Tests Socket.io polling transports, SSE streams, and realtime paths for unauthenticated access, open CORS, and missing Origin enforcement. !/usr/bin/env python3 -- coding: utf-8 -- """Probe WebSocket Socket.io and SSE endpoints for weak auth and Origin checks.""" from kittysploit import from...
EUVD-2026-54769
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
CVE-2026-19270 Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
CVE-2026-19270 Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
MAL-2026-13664 Malicious code in titan-exchange-shared-permissions (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 248b317decf11a421474c727d9b8f543330eab17a65b31adf91f4083782025b6 [email protected] is a dependency-confusion reconnaissance package. package.json declares a postinstall script node index.js...
PT-2026-69190
Name of the Vulnerable Software and Affected Versions Hulupeep mcp-ui-probe versions prior to 0.2.1 Description A path traversal flaw exists in the Journey/Usage component within the src/journey/JourneyStorage.ts file. This issue occurs when the journeyId or filename arguments are manipulated in...
CVE-2026-19270: Improper Limitation of a Pathname to a Restricted Directory
A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function getjourney/deletejourney/analyzejourney/usagestats of the file src/journey/JourneyStorage.ts of the component Journey/Usage. The manipulation of the argument journeyId/filename results in path...
SUSE CVE-2026-64599
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...
Malicious code in @wbnr/frontend-shared (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6208a0da32b8b7ae795d85ecbf95788b876729db08b0a595ad24f05a02dbbdbe The package declares a preinstall lifecycle script preinstall.js that automatically runs on npm install. The script reads the installer's OS username...
Malicious code in content-common (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5656ce6bbda8526587e40810d90b3188e11d507ebb13168203384bfac6b5ec1b [email protected] declares a preinstall lifecycle script in package.json that executes node -e to perform an HTTP GET to a unique subdomain of...
UBUNTU-CVE-2026-64602
In the Linux kernel, the following vulnerability has been resolved: iio: adc: spear: Initialize completion before requesting IRQ In the report from Jaeyoung Chung: "spearadcprobe in drivers/iio/adc/spearadc.c registers its interrupt handler with devmrequestirq before it initializes st-completion...
UBUNTU-CVE-2026-64599
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...
CVE-2026-64599 crypto: amlogic - avoid double cleanup in meson_crypto_probe()
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...
CVE-2026-64599
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...
CVE-2026-64599
Summary (CVE-2026-64599) : The Linux kernel amlogic crypto path (meson_crypto_probe) fixes a double-cleanup/double-teardown bug in meson_allocate_chanlist() space on partial allocation. When a partial allocation fails, the local error path already unwinds resources; an outer cleanup path in meson...
EUVD-2026-53786
In the Linux kernel, the following vulnerability has been resolved: crypto: amlogic - avoid double cleanup in mesoncryptoprobe When mesonallocatechanlist fails after a partial allocation, it already unwinds the allocated chanlist state through its local error path. mesoncryptoprobe then jump to...