17672 matches found
CVE-2026-98237
In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhiwwanmbim: guard against a cyclic NDP chain The NDP traversal in mhimbimrx only stops when wNextNdpIndex is zero. Nothing requires the offsets to advance, so a modem that points an NDP at itself, or at an earlier NDP...
CLEANSTART-2026-PF50810 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint
Security vulnerability affects the temporal-server package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint...
CLEANSTART-2026-HI32575 When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...
Security vulnerability affects the temporal-server package. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the...
CVE-2026-98237: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhiwwanmbim: guard against a cyclic NDP chain The NDP traversal in mhimbimrx only stops when wNextNdpIndex is zero. Nothing requires the offsets to advance, so a modem that points an NDP at itself, or at an earlier NDP...
PT-2026-115717
In the Linux kernel, the following vulnerability has been resolved: net: wwan: mhi wwan mbim: guard against a cyclic NDP chain The NDP traversal in mhi mbim rx only stops when wNextNdpIndex is zero. Nothing requires the offsets to advance, so a modem that points an NDP at itself, or at an earlier...
PT-2026-106566
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the mhi wwan mbim component where the NDP traversal in the mhi mbim rx function only terminates when wNextNdpIndex is zero. Because there is no requirement for offsets to...
EUVD-2026-88981
Socket.IO: Prototype Pollution via Unsafe Client Session Lookup...
Malicious code in bitcion (RubyGems)
Source: amazon-inspector 2227467459663a7608a52405af03fbfbf6f9a25a02dcac5490c29480a846b61d The gem advertises itself as a BIP-39 mnemonic word list but ships a non-functional native extension ext/bitcion/bitcion.c is a 46-byte empty InitBitcion stub whose only purpose is to make RubyGems invoke...
Next.js RSC Multi-CVE Chain RCE
Full-chain Next.js RSC exploitation: tries CVE-2025-55182 React2Shell first, then falls back to Next.js-specific RSC endpoints. Integrates detection signals from CVE-2026-44582/44573/44578 auxiliary modules. !/usr/bin/env python3 -- coding: utf-8 -- """Next.js RSC multi-CVE exploit chain...
Malicious code in bitcion (RubyGems)
RubyGems runs this gem's native extension script ext/bitcion/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...
MAL-2026-17583 Malicious code in bitcion (RubyGems)
RubyGems runs this gem's native extension script ext/bitcion/extconf.rb during gem install. The script exits without action on CI runners and sandboxes, based on CI environment variables, the hostname, the username and the working directory. It continues if the system uptime is over 30 minutes an...
cicd-sensor
Este repositorio no tiene un README...
Malicious code in hardhat-plus (npm)
Source: amazon-inspector 02d908da8470ad86669b080d267b57174ccd77e5fd6ed2c371c430d98e869f2b [email protected] is published under a name resembling the Ethereum development tool 'hardhat' but ships README, type definitions, and docs copied verbatim from the unrelated pino logger project README.md...
Backdooring Sparse Autoencoders
Sparse autoencoders SAEs are increasingly used not only to interpret language models but also to intervene on their internal representations. We show that this creates a supply-chain attack surface: a maliciously modified SAE can induce attacker-chosen behavior when inserted into the forward pass...
Understanding and Enhancing Backdoor Persistency in LLM Agent Post-Training
Developers can build LLM agents by adapting third-party models through benign post-training. We study a supply-chain threat in which an attacker supplies a model with a backdoor: hidden behavior that produces malicious outputs when a particular input pattern appears. Focusing on...
MAL-2026-17508 Malicious code in hardhat-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d908da8470ad86669b080d267b57174ccd77e5fd6ed2c371c430d98e869f2b [email protected] is published under a name resembling the Ethereum development tool 'hardhat' but ships README, type definitions, and docs copied...
Malicious code in hardhat-plus (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 02d908da8470ad86669b080d267b57174ccd77e5fd6ed2c371c430d98e869f2b [email protected] is published under a name resembling the Ethereum development tool 'hardhat' but ships README, type definitions, and docs copied...
compromised-packages
इस रिपॉजिटरी में README नहीं है।...
supply-chain-security-toolkit
supply-chain-security-toolkit 공급망 보안Supply Chain Security 업...
Cross-Chain Access Control for Permissioned Blockchain Interoperation
As enterprise blockchains become increasingly interconnected, access control must extend beyond the boundaries of a single network. Existing approaches mainly focus on controlling access within one blockchain, while cross-chain interactions involve multiple networks that may follow different...