singularity

Singularity of Origin 最近の更新: 新着 2025-11-25 : Chrome リリース 142 に Local Network Access LNA が追加され、Singularity で実装された DNS リバインディング攻撃手法を防止します。Singularity of Origin の LNA-from-Non-Secure-Contexts ブランチは Trial for Local Network Access from Non-Secure Contexts...

CVE-2019-5700

CVE-2019-5700 Unfortunately, I don't have a trendy and clever name for this vulnerability. This bug is fairly simple to exploit. I actually sat on it for quite a while until I realized this might affect more devices than I initially thought. Scope: This bug affects Nvidia Tegra t114-t210 SoCs tha...

CVE-2026-54467

Trusted Firmware-M (TF-M) versions 2 through 2.3.0 (before commit 00d1b3e) contain a vulnerability in the mailbox initialization routine on PSOC64 and RP2350 platforms. The root cause is acceptance of a non-secure, unvalidated pointer supplied during initialization, which could allow compromise o...

CVE-2026-77236

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77235

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77236 Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

EUVD-2026-64017

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

CVE-2026-77236

CVE-2026-77236 is a missing input validation vulnerability in the SecureContext_AllocateContext function of FreeRTOS-Kernel prior to version 11.3.1. The absence of a minimum size check on the stack size parameter allows a local attacker to trigger an out-of-bounds write that corrupts secure-world...

CVE-2026-77235 Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

CVE-2026-77235

FreeRTOS-Kernel versions prior to 11.3.1 contain a missing privilege verification in the secure context cleanup handler (SecureContext_FreeContext). A local attacker with low privileges can trigger a use-after-free condition in secure-world memory through the SVC handler for secure context deallo...

EUVD-2026-64013

Missing privilege verification in the secure context cleanup handler in FreeRTOS-Kernel before 11.3.1 might allow local users to cause a use-after-free condition in secure-world memory via the SVC handler for secure context deallocation. To remediate this issue, users should upgrade to...

PT-2026-79418

Missing minimum size validation in secure context allocation in FreeRTOS-Kernel before 11.3.1 might allow local users to corrupt secure-world heap metadata via an out-of-bounds write with an undersized stack size parameter. To remediate this issue, users should upgrade to version 11.3.1 or later...

PT-2026-79417

Name of the Vulnerable Software and Affected Versions FreeRTOS-Kernel versions prior to 11.3.1 Description A missing privilege verification in the secure context cleanup handler allows local users to trigger a use-after-free condition in secure-world memory. This occurs through the SVC handler us...

CVE-2026-11998

A flaw in AngularJS' Strict Contextual Escaping SCE logic allows bypassing certain SCE policies for resource URLs and can lead to arbitrary JavaScript execution within the context of the victim's browser session. SCE's purpose is to ensure that only trusted or safe values are used in certain...

MiracleLinux 7 : firefox-102.3.0-6.0.1.el7.AXS7 (AXSA:2022-3888:23)

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-3888:23 advisory. Mozilla: Bypassing FeaturePolicy restrictions on transient pages CVE-2022-40959 Mozilla: Data-race when parsing non-UTF-8 URLs in threads...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the coapdtlsgeneratecookie function. An attacker can cause the application to crash by sending a specially crafted DTLS handshake that results in SSLgetSSLCTX returning NULL. Remediation Upgrade libcoap to...

EUVD-2021-22107

Malware in sbrugna...

EUVD-2023-35356

Malicious code in bioql PyPI...

CVE-2021-35465

Certain Arm products before 2021-08-23 do not properly consider the effect of exceptions on a VLLDM instruction. A Non-secure handler may have read or write access to part of a Secure context. This affects Arm Cortex-M33 r0p0 through r1p0, Arm Cortex-M35P r0, Arm Cortex-M55 r0p0 through r1p0, and...

PT-2024-40765 · Git +1 · Boringssl

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the ssl ctx make profiles function. Technical details...