JDWPEx

JDWP Remote Code Execution Exploit A Python 3 implement...

CVE-2026-45685: Improper Input Validation

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetr...

CVE-2026-35049: Improper Input Validation

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

wireapp wire-ios 数字错误漏洞

wire-ios is the client layer that handles all data displayed in mobile applications. Versions of wire-ios prior to 4.16.0 have a numerical error vulnerability, which stems from a lack of length checking. This vulnerability may lead to crashes when receiving specially crafted malicious Proteus...

PT-2026-45830

Name of the Vulnerable Software and Affected Versions wire-ios versions prior to 4.16.0 Description The application crashes automatically upon receiving a specially crafted Proteus external message containing an encrypted payload shorter than 16 bytes. This occurs without user interaction. Becaus...

CVE-2026-44421

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwskan22d 2026-07-22 15:02:24+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mralqohnlq2y...

CVE-2026-45372

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgmyzox52g 2026-05-29 21:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmziti3zcz2h 2026-05-30 10:08:12+00:00| seen|...

CVE-2026-49368

creationtimestamp| type| source ---|---|--- 2026-05-29 20:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdm6qegs25 2026-05-29 22:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjxbuxx72v 2026-06-01 14:37:05+00:00| seen|...

CVE-2026-32905

creationtimestamp| type| source ---|---|--- 2026-05-29 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyzaf633z2v 2026-06-01 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnb72hkvlb25...

CLSA-2026-1780062671 Fix CVE(s): CVE-2026-41035

SECURITY UPDATE: receiver use-after-free in receivexattr via a wire-supplied xattr count passed to qsort: - debian/patches/els/0007-CVE-2026-41035.patch: sort tempxattr.count stored items instead of the untrusted wire count. - CVE-2026-41035...

CVE-2026-49325

The CVE affects the Indian Motorcycle Scout Bobber + Tech 2025 model year, where the Wireless Control Module (WCM) wiring harness controls anti‑theft shutdown. A falling‑edge voltage transition on a dedicated wire pair signals shutdown to a peer ECU, but the receiving ECU cannot distinguish an ac...

CVE-2026-46833

creationtimestamp| type| source ---|---|--- 2026-05-28 22:00:52+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwzicpkh227 2026-05-28 23:37:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmx6v6fxgl2j 2026-05-29 14:45:07+00:00| seen|...

CVE-2026-47333

creationtimestamp| type| source ---|---|--- 2026-05-28 20:00:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwsruwd5o2w 2026-05-28 21:28:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwxp6nfb52r 2026-06-01 18:00:00+00:00| seen|...

CVE-2026-47759

creationtimestamp| type| source ---|---|--- 2026-05-28 17:01:01+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmwiq4djr42l 2026-05-28 17:23:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmwjz5vnzt2i 2026-05-28 21:37:06+00:00| seen|...

SUSE CVE-2026-46075

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-46075 crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path

In the Linux kernel, the following vulnerability has been resolved: crypto: atmel-sha204a - Fix potential UAF and memory leak in remove path Unregister the hwrng to prevent new -read calls and flush the Atmel I2C workqueue before teardown to prevent a potential UAF if a queued callback runs while...

CVE-2026-45865

In the Linux kernel, the following vulnerability has been resolved: mctp i2c: initialise event handler read bytes Set a 0xff value for i2c reads of an mctp-i2c device. Otherwise reads will return "val" from the i2c bus driver. For i2c-aspeed and i2c-npcm7xx that is a stack uninitialised u8. Teste...

CVE-2026-42761

creationtimestamp| type| source ---|---|--- 2026-05-27 12:01:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmthkdikrp2n 2026-05-27 12:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmthuwuia32e...

CVE-2026-9642

creationtimestamp| type| source ---|---|--- 2026-05-26 22:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmryk2eogi2k 2026-05-26 22:15:19+00:00| seen| https://bsky.app/profile/potato.software/post/3mmrzeclokg26 2026-05-29 22:07:08+00:00| seen|...

Linux Distros Unpatched Vulnerability : CVE-2026-46598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - For certain crafted inputs, a 'ed25519.PrivateKey' was created by casting malformed wire bytes, leading to a panic when used. CVE-2026-46598 Note that Nessus...