CVE-2026-101912 ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...

GO-2026-6481 Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server

Mattermost doesn't enforce bot-specific permission checks on the user active status endpoint in github.com/mattermost/mattermost-server...

CVE-2026-101074

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

EUVD-2026-88312

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074 Netcore NR289-GE Authentication boa password-check stack-based overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

CVE-2026-101074

A stack-based buffer overflow exists in the Authentication component of Netcore NR289-GE version 1.4.5102 . The vulnerability is located within the password-check function of the /bin/boa file. An attacker can trigger the overflow by manipulating the Username argument, potentially leading to remo...

Malicious code in wbnr-probe-visible-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776962e1dbbc52e380986c97788bc3fa67272b049d153c25265481ebcd84161 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-17212 Malicious code in wbnr-probe-visible-check (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d776962e1dbbc52e380986c97788bc3fa67272b049d153c25265481ebcd84161 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview wbnr-probe-visible-check is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2026-84656

A flaw was found in Jenkins. A missing permission check allows attackers with 'Item/Read' permission on at least one job to bypass intended access restrictions. This enables them to read sensitive build parameter names and values from jobs they are not authorized to access, leading to information...

Automated-Next.js-Security-Scanner-for-CVE-2025-29927

Next.js CVE-2025-29927 Vulnerability Scanner A command-line security scanner for identifying publicly accessible Next.js applications that may be exposed to CVE-2025-29927. Disclaimer This tool is intended for authorized security testing, vulnerability assessment, research, and defensive security...

The vulnerability of the IpSubnetFilterRule.compareTo() function in the framework for developing network applications, servers, and clients using the Netty protocol allows a hacker to bypass security restrictions.

The vulnerability of the IpSubnetFilterRule.compareTo function in the framework for developing network applications, servers, and Netty protocol clients is related to improper checking of the specified data type for input data. Exploiting this vulnerability can allow an attacker to bypass securit...

CVE-2026-101074: Stack-based Buffer Overflow

A weakness has been identified in Netcore NR289-GE 1.4.5102. The affected element is the function password-check of the file /bin/boa of the component Authentication. Executing a manipulation of the argument Username can lead to stack-based buffer overflow. The attack may be launched remotely. Th...

PT-2026-99906

Name of the Vulnerable Software and Affected Versions Netcore NR289-GE version 1.4.5102 Description A stack-based buffer overflow exists in the Authentication component within the password-check function of the /bin/boa file. This issue allows a remote attacker to trigger the overflow by...

ROS-20260928-73-0095

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

ROS-20260928-73-0009

The vulnerability of the sndsocsetdminame function in the sound/soc/intel/boards/bytcrrt5651.c driver for the bytcrrt5640 sound card in the Linux operating system is related to the lack of checking the returned value. Exploiting this vulnerability could allow a remote attacker to cause a service...

PT-2026-102361

Name of the Vulnerable Software and Affected Versions PyJWT versions prior to 2.14.0 Description PyJWT is a Python implementation of JSON Web Token standards. The signature segment decoding process accepts characters outside the canonical Base64URL representation when non-Base64URL characters are...

CVE-2026-102269: Incorrect Behavior Order: Validate Before Canonicalize

PyJWT is a Python implementation of JSON Web Token standards. Prior to 2.14.0, PyJWT signature segment is affected because signature segment decoding accepts characters outside the canonical Base64URL representation. This occurs when non-Base64URL characters are appended to a valid compact JWS...

CVE-2026-101912: Incorrect Comparison

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.7.1, the isInSubnet and isHostInSubnet methods in src/common.ts compare masked binary strings without validating that both operands use the same IP family. A cross-family containment check whos...