CVE-2026-74403

Root-cause: in the Linux kernel crypto: ccp path for TIO, code checked the result of page_address() after __snp_alloc_firmware_pages() instead of validating the allocation itself. If allocation returns NULL under memory pressure, page_address(NULL) could produce a non-NULL garbage pointer, causin...

CVE-2026-74403 crypto: ccp - Check for page allocation failure correctly in TIO

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snpallocfirmwarepages returns NULL under memory pressure, is it safe to pass it directly to pageaddress? On architectures without HASHEDPAGEVIRTUA...

PT-2026-72839

In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - Check for page allocation failure correctly in TIO Sashiko notes: if snp alloc firmware pages returns NULL under memory pressure, is it safe to pass it directly to page address? On architectures without HASHED PAGE...

EUVD-2014-6517

Malware in sbrugna...

tabernadeltiocaraco.com Improper Access Control vulnerability OBB-3812633

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PayPal Subsidiary Data Breach Hits Up to 1.6 Million Customers

Global e-commerce business PayPal has disclosed a data breach that may have compromised personally identifiable information for roughly 1.6 million customers at a payment processing company PayPal acquired earlier this year. PayPal Holdings Inc. said Friday that a review of its recently acquired...

Information disclosure

The TIO MobilePay - Bill Payments aka com.tionetworks.mobile.android.tioclient application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6639

The TIO MobilePay - Bill Payments aka com.tionetworks.mobile.android.tioclient application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6639

The CVE-2014-6639 entry concerns the Android app TIO MobilePay – Bill Payments (com.tionetworks.mobile.android.tioclient) version 1.1.1, where SSL servers’ X.509 certificate verification is not performed. This lack of certificate validation allows man‑in‑the‑middle attackers to spoof servers and ...