CVE-2026-33317

CVE-2026-33317 OP-TEE PKCS11 PoC This repository contains the Normal World proof of concept, reproduction notes, and captured logs for CVE-2026-33317 / GHSA-8cqw-mg7v-c9p9. The official OP-TEE advisory describes missing validation in entrygetattributevalue for PKCS11CMDGETATTRIBUTEVALUE. The bug...

CVE-2026-72755

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72755 Routinator stores TA certificate in cache without validation

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72755 Routinator stores TA certificate in cache without validation

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72755

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

EUVD-2026-110028

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

CVE-2026-72755

The Routinator software contains a vulnerability where it stores a newly-retrieved TA certificate via HTTPS into its cache without performing proper validation. This flaw allows a potentially malicious certificate to overwrite a known good TA certificate, even if the initial validation fails. The...

NLnet Labs Routinator improper exception handling vulnerability

Versions prior to NLnet Labs Routinator 0.15.3 contain an improper exception handling vulnerability. This vulnerability arises because newly obtained TA certificates obtained via HTTPS are stored in cache without verification; as a result, even if verification fails, known valid TA certificates m...

PT-2026-123453

Routinator stores a newly-retrieved TA certificate via HTTPS in cache without validation, potentially overwriting a known good TA certificate even if validation fails...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-102996 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-102996 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

PT-2026-92290

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An out-of-bounds write exists in the gf ta test set config function within the gf ta test.c file due to improper input validation. This flaw allows for local...

PT-2026-92348

Name of the Vulnerable Software and Affected Versions Google Android affected versions not specified Description A heap buffer overflow exists in the gf ta test set config function within the gf ta test.c file due to a logic error. This flaw allows for local escalation of privilege without...

Astra Linux – Vulnerability in edk2

EDK2’s Network Package is vulnerable to a out-of-bounds read vulnerability when processing the IANA or IATA option in a DHCPv6 Advertise message. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of confidentiality...

Malicious code in john-wick-4-pelicula-comple-ta-online-es-espanol-latino-gratis247 (npm)

--- Credit: OpenSSF source...

Malicious code in hereis-manic-ta (npm)

Source: amazon-inspector 8f1d7872f26b621032b9d498ee228b3d11840629ad7a829182f93f3639304fce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hereis-manuic-ta (npm)

Source: amazon-inspector 98994257011a7c00e30be34633274817cfb5a45a8087d7ce634596a680f80fb4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hereis-maniac-ta (npm)

Source: amazon-inspector 2967c258dc0cf353ca63319a5505e4bad5c3250842b13ca72365586f95e35290 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hereis-mala-ta (npm)

Source: amazon-inspector fecc0de75b05c69afac5be2513674be7c4eb458d69459590549a1b6eefc4b9e0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in hereis-mani-ta (npm)

Source: amazon-inspector 8de72de0019f637dc38a0fe62a75fcc5a44bbc05edbfd106f73ade138b136cfd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...