85 matches found
CVE-2026-64545
A flaw was found in the Linux kernel. The xdpmasterredirect function, which handles network packet redirection, does not properly check for a null pointer. This oversight allows a local attacker to trigger a null pointer dereference by sending a specially crafted XDP eXpress Data Path packet duri...
EUVD-2026-49596
In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdpmasterredirect xdpmasterredirect dereferences the result of netdevmasterupperdevgetrcu without a NULL check, but that helper returns NULL when the receiving device has no upper-master...
CVE-2026-64545 net, bpf: check master for NULL in xdp_master_redirect()
In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdpmasterredirect xdpmasterredirect dereferences the result of netdevmasterupperdevgetrcu without a NULL check, but that helper returns NULL when the receiving device has no upper-master...
PT-2026-65220
In the Linux kernel, the following vulnerability has been resolved: net, bpf: check master for NULL in xdp master redirect xdp master redirect dereferences the result of netdev master upper dev get rcu without a NULL check, but that helper returns NULL when the receiving device has no upper-maste...
CVE-2026-49949
CodexBar before 0.33.0 contains a credential forwarding vulnerability that allows network-adjacent attackers to intercept sensitive credentials by issuing cross-origin or HTTP-downgrade redirects to the shared ProviderHTTPClient transport. Attackers can redirect credentialed provider requests...
CVE-2026-20074
A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...
CVE-2026-20074
The CVE concerns Cisco IOS XR Software’s IS-IS multi-instance routing feature. An unauthenticated, Layer-2 adjacent attacker can trigger the IS-IS process to restart by sending crafted ingress IS-IS packets after forming an adjacency, due to insufficient input validation. The resulting impact is ...
CVE-2026-20074 Cisco IOS XR Software Multi-Instance Intermediate System-to-Intermediate System Denial of Service Vulnerability
A vulnerability in the Intermediate System-to-Intermediate System IS-IS multi-instance routing feature of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause the IS-IS process to restart unexpectedly. This vulnerability is due to insufficient input validation of ingre...
(Pwn2Own) Lexmark CX532adwe getCFFNames Heap-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Lexmark CX532adwe printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getCFFNames function. The issue results from the lack of proper...
Exploit for CVE-2025-14558
CVE-2025-14558 FreeBSD rtsold DNSSL Command Injection RCE...
CVE-2025-61102
FRRouting/frr versions v4.0–v10.4.1 are affected by a NULL pointer dereference in ospf_ext.c show_vty_ext_link_adj_sid, enabling DoS via crafted OSPF packets. Connected advisories indicate patches exist (e.g., Mariner packages <8.5.5-5 or
EUVD-2021-18339
Malware in sbrugna...
EUVD-2022-43988
Malicious code in bioql PyPI...
EUVD-2024-47290
Malicious code in bioql PyPI...
EUVD-2023-36856
Malicious code in bioql PyPI...
EUVD-2025-23398
Malicious code in bioql PyPI...
EUVD-2023-45709
Malicious code in bioql PyPI...
EUVD-2023-39753
Malicious code in bioql PyPI...