13266 matches found
Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...
MAL-2026-12463 Malicious code in streak-day-primitives (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4f0cfff000aa550229c0148bf96c70335e4d37048fa9f8fda3d4391ea2249b The package advertises itself as dependency-free calendar-day arithmetic, but index.mjs contains top-level code that runs on import. All sensitive...
Malicious code in streak-day-primitives (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2c4f0cfff000aa550229c0148bf96c70335e4d37048fa9f8fda3d4391ea2249b The package advertises itself as dependency-free calendar-day arithmetic, but index.mjs contains top-level code that runs on import. All sensitive...
MAL-2026-12461 Malicious code in streak-daily-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea29201e3cd49e11201222e430bd1787a1b00abdc46fad18908d0033459ed2d7 [email protected]'s main entry index.mjs runs a top-level async IIFE that reconstructs identifiers, paths, and URLs from char-code arrays to...
MAL-2026-12460 Malicious code in streak-count-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d391f9ec30841fdf31ec1afeeb309a1e8895c445c811a1a1f7f3e0a754c5e4fa [email protected]'s index.mjs executes a hex-obfuscated routine on module import gated only by NODEENV!== 'production'. When it detects a WSL...
Malicious code in streak-count-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d391f9ec30841fdf31ec1afeeb309a1e8895c445c811a1a1f7f3e0a754c5e4fa [email protected]'s index.mjs executes a hex-obfuscated routine on module import gated only by NODEENV!== 'production'. When it detects a WSL...
CVE-2026-64568
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix unsolbcastproberesp double free on alloc failure ieee80211setunsolbcastproberesp calls kfreercu on the old template before allocating the replacement. If the kzalloc then fails, it returns -ENOMEM while...
CVE-2026-20289: Insertion of Sensitive Information into Log File
A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacker with low privileges to access sensitive information. This vulnerability is due to the logging of sensitive information. An attacker could exploit this vulnerability by enabling a specific logging...
EUVD-2026-53002
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-11836
Insufficient verification of data authenticity in Caliptra Core ROM and Core Firmware validatedebugunlocktoken in subsystem mode allows an attacker with access to the integrator's debug unlock signing service to unlock production debug on an unintended device by presenting a valid token issued fo...
EUVD-2026-52549
Time-of-check time-of-use TOCTOU vulnerability combined with missing input validation in Caliptra Core ROM UpdateResetFlow::run in subsystem mode allows a compromised local attacker to silently bypass secure boot by supplying an AXI staging address that is not validated against the strap-configur...
ROS-20260804-73-0040
The vulnerability of the blkregisterqueue function in the block/blk-sysfs.c module, which is part of the Linux kernel’s block-level support, relates to the absence of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to...
ROS-20260804-73-0029
The vulnerability of the cfg80211checkandendcac function in the net/wireless/reg.c module, which supports wireless communication in Linux kernels, is related to state management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260804-73-0025
The vulnerability of the net/hsr/hsrslave.c component in the Linux operating system is related to incorrect syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service failures...
JLSEC-2026-1087 libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability...
libssh2 through 1.11.1, fixed in commit a13bb6c, contains a missing bounds check vulnerability that allows a malicious SSH server to trigger an arbitrary-length heap out-of-bounds read and a free of an uninitialized pointer via the publickey subsystem. In libssh2publickeylistfetch, the version 1...
USN-8620-4 linux-intel-iotg vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
kernel: xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete
A flaw was found in the Linux kernel's xfrm IPSec framework subsystem. This vulnerability, a use-after-free, occurs when the system incorrectly manages memory related to security policies, specifically during the deletion of xfrmstate lists. An attacker with local access could exploit this flaw b...
USN-8620-3 linux-intel-iot-realtime, linux-intel-iotg-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...