7617 matches found
IU: Imperceptible Universal Backdoor Attack
Backdoor attacks pose a critical threat to the security of deep neural networks, yet existing efforts on universal backdoors often rely on visually salient patterns, making them easier to detect and less practical at scale. In this work, we introduce a novel imperceptible universal backdoor attac...
EUVD-2026-9030
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
CVE-2026-3277
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
CVE-2026-3277
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
CVE-2026-3277
The vulnerability CVE-2026-3277 affects PowerShell Universal prior to version 2026.1.3, where the OpenID Connect (OIDC) client secret is stored in cleartext in the .universal/authentication.ps1 script. An attacker with read access to that file can obtain the OIDC client credentials, leading to po...
CVE-2026-3277
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
CVE-2026-3277
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
PT-2026-22344
The OpenID Connect OIDC authentication configuration in PowerShell Universal before 2026.1.3 stores the OIDC client secret in cleartext in the .universal/authentication.ps1 script, which allows an attacker with read access to that file to obtain the OIDC client credentials...
The vulnerability of the usb_reset_device() function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.
The vulnerability of the usbresetdevice function in the drivers/usb/core/hub.c file of the Linux kernel’s USB device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow a attacker to cause a service failure...
Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.9.0 release
Red Hat build of OpenTelemetry 3.9.0 has been released This release of the Red Hat build of OpenTelemetry provides new features, security improvements, and bug fixes. Breaking changes: The deprecated OpenCensus Receiver, which provided backward compatibility with the OpenCensus project for easier...
CVE-2026-27615
ADB Explorer is a fluent UI for ADB on Windows. In versions prior to Beta 0.9.26022, ADB-Explorer allows the ManualAdbPath settings variable, which determines the path of the ADB binary to be executed, to be set to a Universal Naming Convention UNC path in the application's settings file. This...
Eve'S Forgery Probability from Her False Acceptance Probability: Interactive Authentication, Holevo Information and the Min-Entropy
We obtain estimates for Eve's forgery probability, namely the probability that she is able to forge a message which Alice or Bob mistakenly accept over a noisy Quantum channel for generating a shared Quantum secret key. This probability is related to Eve's success probability obtained in a previo...
The vulnerability of the dbg_create_files() function in the drivers/usb/chipidea/debug.c module of the Linux kernel device driver for USB chips allows a hacker to cause a service failure.
The vulnerability of the dbgcreatefiles function in the drivers/usb/chipidea/debug.c file of the Linux kernel device driver for USB chipsets is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a system failure...
NanaZip 安全漏洞
NanaZip is a compression software open source by the M2-Team. Versions of NanaZip from 5.0.1252.0 to 6.0.1638.0, as well as versions before 6.5.1638.0, have security vulnerabilities. These vulnerabilities stem from memory corruption in the UFS parser. Customized .ufs/.ufs2/.img files may trigger...
The vulnerability of the snd_usb_endpoint_set_params() function in the sound/usb/endpoint.c module of Linux’s sound device support for USB audio devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the sndusbendpointsetparams function in the sound/usb/endpoint.c module, which is part of Linux’s sound device support for USB devices, is related to incorrect calculation of buffer size. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
@nestjs/ng-universal (>=7.1.0, <=7.1.1) potentially affected by CVE-2026-27739 via @nguniversal/express-engine (16.0.0)
@nguniversal/express-engine NPM version 16.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @nguniversal/express-engine and may be impacted: - @nestjs/ng-universal =7.1.0, =7.1.1 Source cves: CVE-2026-27739 Source advisory: OSV:GHSA-X288-3778-4HHX...
@cosla/sensemaking-web-ui (>=1.0.5, <=1.0.8), @manniwatch/client-desktop (>=0.30.0, <=0.30.1) +3 more potentially affected by CVE-2026-27738 +1 more via @angular/ssr (>=19.0.5, <=19.2.19)
@angular/ssr NPM version =19.0.5, =1.0.5, =0.30.0, =0.30.0, =19.0.0-alpha.20, =19.0.0-alpha.20, =19.0.0-alpha.24 Source cves: CVE-2026-27738, CVE-2026-33397 Source advisory: OSV:GHSA-XH43-G2FQ-WJRJ...
CVE-2026-25603
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context o...
CVE-2026-3201
A flaw was found in the USB HID dissector in Wireshark. This issue occurs when malformed packets are decoded from a pcap file or the network, causing an excessive consumption of memory, resulting in a denial of service. Mitigation If the USB HID protocol dissector is not being used, it can be...