PT-2026-33368

Name of the Vulnerable Software and Affected Versions mcp-framework versions prior to 0.2.22 Description The readRequestBody function in the HTTP transport concatenates request body chunks into a string without enforcing a size limit. Although a maxMessageSize configuration value exists, it is no...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005441)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005441 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In the cache missing code path o...

The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...

Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005009)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005009 advisory. In the Linux kernel, the following vulnerability has been resolved: bcache: avoid oversized read request in cache missing code path In the cache missing code path o...

Azure Linux 3.0 Security Update: kernel (CVE-2024-46686)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-46686 advisory. - In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid dereferencing rdata=NU...

Unity Linux 20.1060a Security Update: kernel (UTSA-2026-003887)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003887 advisory. An incorrect read request flaw was found in the Infrared Transceiver USB driver in the Linux kernel. This issue occurs when a user attaches a malicious USB device. A...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-992899)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992899 advisory. In the Linux kernel, the following vulnerability has been resolved: PCI: keystone: Add workaround for Errata i2037 AM65x SR 1.0 Errata i2037 in AM65x/DRA80xM...

GHSA-7WFC-4796-GMG5 ZITADEL Vulnerable to Unauthenticated Full-Read SSRF via V2 Login

Summary Zitadel is vulnerable to an unauthenticated, full-read SSRF vulnerability. An unauthenticated remote attacker can force Zitadel into making HTTP requests to arbitrary domains, including internal addresses. The server then returns the upstream response to the attacker, enabling data...

EUVD-2005-1860

Malware in sbrugna...

EUVD-2009-2945

Malware in sbrugna...

EUVD-2022-27230

Malicious code in bioql PyPI...

EUVD-2021-31269

Malicious code in bioql PyPI...

EUVD-2025-8105

Malicious code in bioql PyPI...

CVE-2022-50410

CVE-2022-50410 pertains to the Linux kernel NFSD component handling NFSv2 READ. The issue arises from the historical optimization that combines the RPC receive and send buffers into a single page array, shrinking the send buffer when a large RPC Call is received. A client can trigger this shrinka...

CVE-2022-50410 NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

Linux Distros Unpatched Vulnerability : CVE-2024-41050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cachefiles: cyclic allocation of msgid to avoid reuse Reusing the msgid after a maliciously completed reopen request may cause a read request to remain...

Linux Distros Unpatched Vulnerability : CVE-2021-47275

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bcache: avoid oversized read request in cache missing code path In the cache missing code path of cached device, if a proper location from the internal B+ tree...

CVE-2022-22076

information disclosure due to cryptographic issue in Core during RPMB read request...

CVE-2024-43771

In gattsprocessreadreq of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-43771

In gattsprocessreadreq of gattsr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation...