SUSE CVE-2026-46285

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

CVE-2026-46285

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

UBUNTU-CVE-2026-46285

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

CVE-2026-46285

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

CVE-2026-46285 mtd: docg3: fix use-after-free in docg3_release()

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

CVE-2026-46285

CVE-2026-46285 : In the Linux kernel, the mtd/docg3 release path has a use-after-free: docg3 is obtained from cascade->floors[0]->priv, then freed by doc_release_device() before the loop completes, and later code dereferences docg3 via docg3->cascade->bch. The root cause is using a fr...

EUVD-2026-35150

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

CVE-2026-46285 mtd: docg3: fix use-after-free in docg3_release()

In the Linux kernel, the following vulnerability has been resolved: mtd: docg3: fix use-after-free in docg3release In docg3release, the docg3 pointer is obtained from cascade-floors0-priv before the loop that calls docreleasedevice on each floor. docreleasedevice frees the docg3 struct via...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: bcachefs: kvfree bchfs::snapshots in bch2fssnapshotsexit. bchfs::snapshots is allocated by kvzalloc in snapshottmut. It should be freed by kvfree, not kfree. Otherwise, umount will trigger an error: 406.829178 BUG: Unable to...

CVE-2025-1727

The protocol used for remote linking over RF for End-of-Train and Head-of-Train also known as a FRED relies on a BCH checksum for packet creation. It is possible to create these EoT and HoT packets with a software defined radio and issue brake control commands to the EoT device, disrupting...

EUVD-2025-21087

Malicious code in bioql PyPI...

MAL-2025-47762 Malicious code in electrum-bch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4c3bb0f735a352c6f4d18865f3a145912c31f6b9da22c48e731e7fe750b1dd The modification of https://github.com/spesmilo/electrum not clear which version or fork that during usage will exfiltrate files from the current directory,...

Malicious code in electrum-bch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4c3bb0f735a352c6f4d18865f3a145912c31f6b9da22c48e731e7fe750b1dd The modification of https://github.com/spesmilo/electrum not clear which version or fork that during usage will exfiltrate files from the current directory,...

CVE-2025-1727

The protocol used for remote linking over RF for End-of-Train and Head-of-Train also known as a FRED relies on a BCH checksum for packet creation. It is possible to create these EoT and HoT packets with a software defined radio and issue brake control commands to the EoT device, disrupting...

MAL-2025-307 Malicious code in sdk-coin-bch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c438437d2b489e7c765c8ee7c5acc09b5f162251963c40844c5f12f8d90d2fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sdk-coin-bch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c438437d2b489e7c765c8ee7c5acc09b5f162251963c40844c5f12f8d90d2fab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

bch-fps.ch Cross Site Scripting vulnerability OBB-3336508

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bch-wallet-plugin-postoffice (>=1.0.0 <=1.0.8), bitcoin-wallet-api (>=0.0.5 <=0.1.6) potentially affected by CVE-2020-15130 via slpjs (>=0.22.5 <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-15130 Source advisory: OSV:GHSA-CC2P-4JHR-XHHX...

bch-wallet-plugin-postoffice (>=1.0.0 <=1.0.8), bitcoin-wallet-api (>=0.0.5 <=0.1.6) potentially affected by CVE-2020-11071 via slpjs (>=0.22.5 <=0.23.3)

slpjs NPM version =0.22.5, =1.0.0, =0.0.5, =0.1.6 Source cves: CVE-2020-11071 Source advisory: OSV:GHSA-JC83-CPF9-Q7C6...

Joomla Bch / Content Shell Upload

Joomla comcontent Shell Upload Vulnerability x Author : AgdScorp x Home : www.turkguvenligi.info former x E-mail : [email protected] x Found : Mon, Dec 24, 2012 x Tested : Windows 7, Ubuntu, Gentoo x Dork : inurl:"/index.php?option=combch" x The Conlusion The vulnerability resides at 'cont'...