1056 matches found
Quantum-Silicon-Core-Loader
Quantum Silicon Core Loader Primary Core: qslcl.asm v0.0.2 under development Assistant Module: qslcl.bin v0.7.4 Universal Controller: qslcl.py v2.2.2 Legally Protected Research - This project operates under established legal frameworks for security research, right to repair, and academic freedom...
CVE-2026-121420 SurrealDB 3.2.0 before 3.3.0 SSRF Guard Bypass via IPv6 Transition Addresses
SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolver isprivateip check that fails to unwrap NAT64, 6to4, and Teredo IPv6 addresses. Authenticated users triggering outbound HTTP requests via SurrealQL http functions can use transition...
CVE-2026-121420
SurrealDB versions 3.2.0 before 3.3.0 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the FilteringResolver's is_private_ip check. The root cause is the failure to unwrap NAT64 , 6to4 , and Teredo IPv6 transition addresses. This allows authenticated users to trigger ou...
AtomicMemory
Reference FPGA Implementation Cyclone V This directory contains the reference RTL modules, precompiled FPGA images, and optional TCL test scripts for the atomic measurement–collapse primitive. This primitive is a CMOS-compatible hardware measurement–collapse mechanism that enforces single-read...
CVE-2026-121420: surrealdb: SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolver…
SurrealDB from 3.2.0 before 3.3.0 contains a server-side request forgery vulnerability in the FilteringResolver isprivateip check that fails to unwrap NAT64, 6to4, and Teredo IPv6 addresses. Authenticated users triggering outbound HTTP requests via SurrealQL http functions can use transition...
SCTT-2026-33-0002-DWM-Visual-Field-Singularity
SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...
-SCTT-2026-33-0002-DWM-Visual-Field-Singularity
SCTT-2026-33-0002: DWM Visual-Field Singularity 📡 Theoretical Classification ID: SCTT-2026-33-0002 Researcher: Americo Simoes SimoesCTT Physics: Theorem 4.2 - Turbulent Phase Transition TPT Constant: α = 0.0302011 Target: Desktop Window Manager dwm.exe / Windows Graphics Component Obsoletes:...
CVE-2026-97045 Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
CVE-2026-97045
The golang.org/x/net package contains a vulnerability in the childTextNodesAreLiteral function. The root cause is that the function previously stopped walking up the tree at the nearest foreign ancestor once an HTML integration point was found. This is insufficient because that integration point ...
GO-2026-6866 Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net
In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...
EUVD-2026-107409
Astro: Arbitrary CSS injection in Astro View Transitions...
CVE-2026-114127
A flaw was found in Astro. Its server-side View Transition stylesheet generator fails to properly sanitize animation properties when creating transition styles. A remote attacker able to supply input to these properties can inject arbitrary Cascading Style Sheets CSS rules into server-rendered we...
CVE-2026-114127
Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application that passes attacker-controlled data into properties such as duration, dela...
CVE-2026-114127
Astro is a web framework for content-driven websites. From 7.1.0 until 7.3.3, Astro's server-side View Transition CSS generator does not keep string animation properties within their generated declarations. An application that passes attacker-controlled data into properties such as duration, dela...
PT-2026-120730
Name of the Vulnerable Software and Affected Versions Astro versions 7.1.0 through 7.3.2 Description The server-side View Transition CSS generator fails to maintain string animation properties within generated declarations. When an application passes attacker-controlled data into properties such ...
Astro cross-site scripting vulnerability
Versions 7.1.0 through 7.3.3 of Astro contain a cross-site scripting vulnerability. This arises because the server-side View Transition CSS generator fails to restrict string animation attributes within generated declarations. When an application passes attacker-controlled data into properties su...
SUSE CVE-2026-98587
In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...
DEBIAN-CVE-2026-98587
In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...
CVE-2026-98587
In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...
CVE-2026-98587
In the Linux kernel, the following vulnerability has been resolved: firewire: cdev: fix back-transition for isoresourceauto client resource The todo member of isoresourceauto structure represents the state of the client resource and normally transitions in the following order: ISORESAUTOALLOC -...