44374 matches found
EUVD-2026-55431
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airohanpusendmsg always maps the mailbox buffer with DMATODEVICE, but some callers expect the NPU to write response data back into the same buffer: - airohanpuwlanmsgget...
CVE-2026-68330
CVE-2026-68330 relates to the Linux kernel net/airoha NPU mailbox handling. The issue arises because airoha_npu_send_msg() always maps the mailbox buffer with DMA_TO_DEVICE, while some callers expect the NPU to write the response back into the same buffer. On non‑cache‑coherent architectures (e.g...
CVE-2026-68330 net: airoha: Fix DMA direction for NPU mailbox buffer
In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airohanpusendmsg always maps the mailbox buffer with DMATODEVICE, but some callers expect the NPU to write response data back into the same buffer: - airohanpuwlanmsgget...
HP Systems Insight Manager - logfile File Read Detection (CVE-2010-3286)
Detects CVE-2010-3286 via HEAD switchFWInstallStatus.jsp?logfile=/etc/passwd. !/usr/bin/env python3 -- coding: utf-8 -- """Detects CVE-2010-3286 via HEAD switchFWInstallStatus.""" import re from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclien...
DEBIAN-CVE-2026-19389
Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer asfdemux when parsing header objects from crafted ASF, WMV, or WMA files. Insufficient validation of attacker-controlled length and size values can bypass bounds checks and cause...
[SECURITY] Fedora 43 Update: python-wsgidav-4.3.5-1.fc43
A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...
Windows Server Update Service Network Change
The vulnerability of the Windows Server Update Service WSUS for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to make changes to the system remotely...
PT-2026-69898
Name of the Vulnerable Software and Affected Versions apache-airflow-providers-amazon versions prior to 9.34.0 Description The AWS Systems Manager Parameter Store and Secrets Manager backends in the Amazon provider resolve a team-scoped Connection or Variable id through a team-agnostic lookup if...
CVE-2026-71870 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
GHSA-FWG2-594C-JP42 vulnerabilities
Vulnerabilities for packages: litellm, open-webui, nemo...
CVE-2026-56818 vulnerabilities
Vulnerabilities for packages: tinkerpop, pinot, hadoop-fips...
MAL-2026-13674 Malicious code in statist-browser-typed-client-eventea.projects.tdeal (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56afa18eac7769497f21431af2a739dd5040563541223e41786746e0c44957a2 Package contains 2 files with no static or behavioral indicators of supply-chain attack shapes. No lifecycle scripts fetching remote content, no...
GHSA-539M-9XH6-Q6RR vulnerabilities
Vulnerabilities for packages: awx, mlflow, jupyter-all-spark-notebook...
CVE-2026-71556 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, gitaly, rancher-fleet-fips, external-secrets-operator, gptscript, flux-notification-controller-fips, k9s-fips, gitlab-rails-ce-fips, cloudbeat-fips, chainloop-cli-fips, grafana-alloy-fips, gitea, kyverno-fips, coder-fips, google-osconfig-agent,...
CVE-2026-71557 vulnerabilities
Vulnerabilities for packages: gitaly, pulumi, pulumi-language-java, witness, nuclei, boring-registry, kaniko, zot, skaffold, crossplane, steampipe, dagger, flux-image-automation-controller, gitea, act, src-fingerprint, gomplate, scorecard, grype, kyverno, nfpm, kubevela, trivy,...
[SECURITY] Fedora 44 Update: erlang-26.2.5.21-5.fc44
Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...
Compositional Threat Analysis of Latent Compromise in LLM Agent Systems: The Order 66 Scenario
In the fictional Order 66, catastrophe does not arise from a powerful command alone: a trusted population is preconditioned, a short directive activates the concealed condition, and protective authority turns against the system. This paper translates that mechanism into an origin-neutral security...
Linux Distros Unpatched Vulnerability : CVE-2026-20345
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded...