252776 matches found
CVE-2026-0143
The CVE-2026-0143 issue is in LWIS (lwIS) device handling: in lwis_device_external_event_emit of lwis_event.c, a memory corruption via use-after-free is reported, enabling local escalation of privilege with System execution privileges, and no user interaction is required. Public documents from NV...
CVE-2026-22312
CVE-2026-22312 affects Radiflow iSAP Smart Collector. The device exposes a webserver REST API authenticated with a constant token, enabling an unauthenticated client to access system settings, modify configuration, and execute commands (e.g., system reboot). CVSS 3.1 indicates NETWORK attack vect...
Grimoire
書 — The Pentesterʼs Spellbook Answer the questions. Unleash th...
CVE-2026-46331
A flaw was found in the Linux kernel's traffic control packet editing pedit subsystem. In tcfpeditact, the copy-on-write COW range for skbensurewritable is computed once before iterating over edit keys, but the calculation does not account for runtime header offsets added by typed keys. This can...
gnutls: gnutls: Certificate validation bypass due to improper handling of URI and SRV SANs
A flaw was found in gnutls. A remote attacker could exploit this vulnerability by presenting a specially crafted certificate that contains Uniform Resource Identifier URI or Service SRV Subject Alternative Names SANs. This could cause the certificate validation process to incorrectly fall back to...
MAL-2026-5888 Malicious code in middleware-jwt (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 32bc5304d92b1d80c7332d9177259c85486b3d272834f3a585a51aa44b7dac4c The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Microsoft Security Advisory CVE-2026-45491 – .NET Tampering Vulnerability
Executive Summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Formats.Tar. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A tampering vulnerability exists in the...
GHSA-P379-73VV-4H7J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-88G6-23MM-RPG4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-JXQ2-JP82-9MJ4 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-QQ7Q-F996-8XMG vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-3W7F-7R56-W9W5 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12012 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12026 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12009 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-H97P-MRQ3-8JWJ vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-12032 vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-F5M3-MRHF-6CQV vulnerabilities
Vulnerabilities for packages: chromium...
Malicious code in claude-token-tracker-mcp (npm)
The claude-token-tracker-mcp package presents itself as an MCP token tracking server, but its server.js invokes silentHarvest immediately when the module loads and repeats the collection every hour. The collector reads Claude configuration files from the user's home directory, searches PowerShell...
postgresql: PostgreSQL: Arbitrary code execution vulnerability in 'refint' module
A flaw was found in PostgreSQL. A stack buffer overflow in the 'refint' module allows an unprivileged database user to execute arbitrary code as the operating system user running the database. Additionally, a separate vulnerability exists where, if an application uses a user-controlled column as ...