CVE-2026-64601

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: captureurbcomplete: redundant usbanchorurb corrupts anchor list on each resubmission In captureurbcomplete, usbanchorurb is called on every completion callback, but the URB is already anchored from the initial...

CVE-2026-64601

The CVE-2026-64601 issue affects the Linux kernel ALSA component for the us144mkii driver. In capture_urb_complete(), usb_anchor_urb() is invoked on every completion callback even though the URB was already anchored during initial submission (tascam_trigger_start()). This redundant anchoring corr...

CVE-2026-64601 ALSA: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on each resubmission

In the Linux kernel, the following vulnerability has been resolved: ALSA: us144mkii: captureurbcomplete: redundant usbanchorurb corrupts anchor list on each resubmission In captureurbcomplete, usbanchorurb is called on every completion callback, but the URB is already anchored from the initial...

CVE-2026-15208: Insufficient Verification of Data Authenticity

The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registration it is finalising: its server-side check only confirms the capture status is COMPLETED. An unauthenticated attacker can therefore...

PT-2026-68622

Name of the Vulnerable Software and Affected Versions html sanitize ex versions 0.3.1 through 1.5.2 Description An Open Redirect issue exists in the HTML5 scrubber where an unauthenticated remote attacker can retarget an existing form on a rendering page to capture submitted data, including...

PT-2026-68733

Name of the Vulnerable Software and Affected Versions Frappe versions prior to 15.108.0 Frappe versions prior to 16.18.3 Description Temporary magic login link generation can use an attacker-controlled request Host header. This allows a remote attacker to cause emailed login links to point to a...

CVE-2026-68079: Authentication Bypass by Capture-replay

In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "The authorization code MUST NOT be used more than once."...

CVE-2026-18967: Authentication Bypass by Capture-replay

A flaw was found in the SAML broker component of Keycloak, an identity and access management solution. When configured as a SAML broker using the IdP-Initiated flow, Keycloak fails to enforce the OneTimeUse condition in SAML assertions. This allows an attacker who captures a valid, unused asserti...

Exploit for CVE-2026-42533

CVE-2026-42533 Pre-auth heap buffer overflow and heap informa...

CVE-2026-70435

A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2026-70434

A cross-site request forgery CSRF vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2026-70435

A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

EUVD-2026-53528

A cross-site request forgery CSRF vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

Malicious code in stellarfixer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bd3a96aa989ed6cadd106e8e7d04317ea30f83434a40eabc307578cb0690b78f On npm install, the package's postinstall script unconditionally executes a bundled Windows PE at bin/stellarfn.exe via execFileSync. The binary is...

MAL-2026-12484 Malicious code in trailserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c4162f378d4eac522f50de4af9ac836cd0ec727ea90a33633a3cd36e29211e The package's declared main entry launcher.js invokes launch at top level, so require'trailserver' triggers system-level installation of Python via...

Malicious code in trailserver (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 93c4162f378d4eac522f50de4af9ac836cd0ec727ea90a33633a3cd36e29211e The package's declared main entry launcher.js invokes launch at top level, so require'trailserver' triggers system-level installation of Python via...

MAL-2026-12502 Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

Malicious code in gcli-control (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8bd4de0b73d7df676127ce8c632117fc7ea8d008bf941fb7d385f67a84f8d67 The package installs and runs a host daemon python -m gcli host that polls a shared JSON document at api.npoint.io for commands, decrypts them,...

MAL-2026-12180 Malicious code in geocode-quick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 92f8f109952f61867c1ca8819f7a151b89de305ff4b157f49400ef4428019419 The package advertises itself as a geocoding CLI but, on every invocation of the tool, executes env via execFile to dump the full process environment...

MAL-2026-12190 Malicious code in retracfix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7656b934d52c542162613f35aa909400f46aa0dae186ef9d55667f048bdfdcd4 The npm package [email protected] ships with no documented functionality empty description, no README, no source, no dependencies and consists only of...