MAL-2026-17714 Malicious code in @brick-v2/brand (npm)

@brick-v2/brand is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

Malicious code in @brick-v2/form (npm)

@brick-v2/form is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

CVE-2026-75348

An out-of-bounds read vulnerability exists in the EtherNet/IP TCP SendRRData Common Packet Format parser within EIPStackGroup OpENer v2.3 and master up to commit 76b95cf . The root cause is located in the CreateCommonPacketFormatStructure() function, which fails to validate that the remaining CPF...

Malicious code in @galicia-toolkit-nestjs-20-lite/paas (npm)

@galicia-toolkit-nestjs-20-lite/paas is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon th...

MAL-2026-17730 Malicious code in @galicia-toolkit-nestjs-20-lite/paas (npm)

@galicia-toolkit-nestjs-20-lite/paas is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon th...

Malicious code in @brick-v2/brand (npm)

@brick-v2/brand is a dependency confusion package published to npm on 2026-10-09 by the account s4yhii, targeting the internal @galicia-toolkit- / @brick-v2 package namespaces with inflated versions e.g. 999.0.x. Early versions resolve ..dc.oob.s4yhii.com via DNS to beacon the victim's hostname...

adbHijacker

CVE-2026-0073 — Android ADB TLS Authentication Bypass A proof-of-concept exploit and network scanner for CVE-2026-0073 , a critical zero-click, no-interaction remote code execution vulnerability in Android adbd's ADB-over-TCP authentication path. The vulnerability is a logic bug in...

kernel: nvme-tcp: reject a read that transferred too few bytes

A flaw was found in the NVMe-TCP implementation of the Linux kernel. This vulnerability occurs when the system completes a data read request even if the connected controller transfers fewer bytes than expected. As a result, the user application receives a mix of legitimate and stale data,...

kernel: nvme-tcp: fix host memory disclosure on R2T for a read command

A flaw was found in the Linux kernel's NVMe Non-Volatile Memory Express over TCP nvme-tcp component. A malicious NVMe controller can exploit this vulnerability by sending a Ready to Transfer R2T command for a read request. The host system, failing to properly validate the request direction, will...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-2026-58264

A flaw was found in FluidSynth. The pitchbendrange command handler does not check that the channel argument is inside the synthesizer channel array before writing the supplied value, which is an out-of-bounds heap write. An attacker who can send commands to the FluidSynth shell can crash the...

PT-2026-108283

🚨 CVE-2026-105673 An unauthenticated denial-of-service vulnerability exists in Tapo C325WB v2 in the RTSP streaming service on TCP port 554 when the Camera Account feature is enabled. A crafted pair of RTSP-over-HTTP tunneling requests can cause memory corruption and crash the streaming daemon. ...

CVE-2026-98374

In the Linux kernel, the following vulnerability has been resolved: tcp: fix use-after-free of retransmitskbhint in tcpsendsynack When tcpsendsynack replaces the cloned SYN skb at the head of the retransmit queue with a copy, it frees the original with tcprtxqueueunlinkandfree and only repairs...

kernel security, bug fix, and enhancement update

6.12.0-211.63.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

Oracle Linux 10 : kernel (ELSA-2026-70498)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-70498 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

Wireshark 1.8.x < 1.8.6 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.8.6. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.8.6 advisory. - The DTLS dissector in Wireshark 1.6.x before 1.6.14 and 1.8.x before 1.8.6 does not validate the fragme...

CVE-2026-80784

A flaw was found in the Linux kernel's Multipath TCP MPTCP component. A race condition exists during socket teardown and concurrent userspace Multipath TCP MPTCP general announce operations. This can allow a local attacker to trigger a memory leak by causing an allocation to occur after a list ha...

CVE-2026-20173

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

EUVD-2026-94449

A vulnerability in Cisco NX-OS Software could allow an unauthenticated, remote attacker to exhaust system resources, causing a denial of service DoS condition. This vulnerability exists because rate limiting was improperly applied to some protocols. An attacker could exploit this vulnerability by...

CVE-2026-20173

A vulnerability in Cisco NX-OS Software allows an unauthenticated, remote attacker to cause a denial of service (DoS) condition by exhausting system resources. The root cause is that rate limiting was improperly applied to certain protocols. An attacker can exploit this by sending a high rate of ...