6504 matches found
EUVD-2026-55103
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...
CVE-2026-21078
CVE-2026-21078 affects Samsung Smart Switch in trouble scanning mode prior to 3.7.72.6. The issue is insufficient verification of data authenticity, allowing adjacent attackers to spoof device identity. According to the provided metrics, the exploit requires only low privileges and exists an acti...
CVE-2026-21078
Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity...
PT-2026-69773
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs during scanning when the device delivers a truncated beacon or probe response frame. The at76 guess freq function only verifies that the received frame is at...
CVE-2026-68373: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before subtracting the fixed management-body offset: len -= eloff; For both...
PT-2026-69465
Name of the Vulnerable Software and Affected Versions duhow/xiaoai-patch versions prior to commit fb07049 Description A server-side request forgery SSRF issue allows a remote attacker to force a Xiaomi smart speaker to perform HTTP requests to arbitrary internal or external URLs. This occurs...
CVE-2026-72581: Server-Side Request Forgery (SSRF)
A server-side request forgery SSRF vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs. The /auth endpoint in api/main.py uses the user-supplied url POST parameter to...
Joern 4.0.600
Joern is the bug hunter's workbench. With this tool, you can uncover attack surface, sloppy coding practices, and variants of known vulnerabilities using an interactive code analysis shell. Joern supports C, C++, LLVM bitcode, x86 binaries via Ghidra, JVM bytecode via Soot, and Javascript...
Linux Distros Unpatched Vulnerability : CVE-2026-68373
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: at76c50x-usb: avoid length underflow in at76guessfreq at76guessfreq checks only that the received frame is at least a bare 802.11 header 24 bytes before...
PT-2026-69406
Name of the Vulnerable Software and Affected Versions Smart Switch versions prior to 3.7.72.6 Description Insufficient verification of data authenticity in the trouble scanning mode allows adjacent attackers to spoof device identity. Recommendations Update to version 3.7.72.6 or later...
AutoSRC-AISkill
AutoSRC-AISkill A fully automated SRC vulnerability discover...
shodan
Shodan API client for Go A small Shodan API client and CLI bu...
Exploit for CVE-2026-64638
🔍 @Mr-LeonardoGomes 💀 XSS2Shell-CVE-2026-64638...
codex-security npm-v0.1.8
Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. See theCodex Security documentation for more details. Some cybersecurity requests and protected findings require approval through Trusted Access for Cyber. ...
OnionHop v3.7.10
OnionHop V3 OnionHop V3 is a modern, cross-platform desktop app Windows, macOS and Linux that routes your traffic through Tor. It can run Tor as a local SOCKS proxy or as a system-wide tunnel, automatically pick a working connection strategy for your network with Smart Connect , scan and apply...
vigolium v0.3.10
Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision Vigolium provides two complementary scanning modes: Native Scan vigolium scan: Fast, powerful, and flexible. Deterministic, multi-phase scanning with 317 modules across content discovery,...
DEBIAN-CVE-2026-20347
A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in Mach-...
UBUNTU-CVE-2026-20348
A vulnerability in the XAR file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in XAR file...
UBUNTU-CVE-2026-20339
A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PESpi...