497655 matches found
📄 CorgetGpsDget 2_3.2 Command Injection
CorgetGpsDget version 23.2 suffers from a remote command injection vulnerability. Exploit Title: CorgetGpsDget 23.2 - OS Command Injection Date: 2026-07-05 Exploit Author: Bytetobreach Fofa server: "PTTServer" Vendor Homepage: http://corget.com Version: GpsDget 23.2, build 2020-09-01 dget.version...
CVE-2026-68193
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRXNOTIFY on non-mmio buses PKTTYPETXRXNOTIFY is an mmio-only event, but mt7925rxcheck and mt7925queuerxskb dispatch it to mt7925mactxfree on every bus. mt7925mactxfree cleans the DMA tx queues with...
CVE-2026-68211
In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on startstreaming failure The vb2 framework hands buffers to the driver via bufqueue before calling startstreaming. If startstreaming returns an error without first returning those buffe...
Apache Tomcat 9.0.116 < 9.0.117 Missing Encryption of Sensitive Data Vulnerability (CVE-2026-34486)
The version of Tomcat installed on the remote host is 9.0.116 prior to 9.0.117. It is, therefore, affected by a vulnerability as referenced in the fixedinapachetomcat9.0.117security-9 advisory. - Missing Encryption of Sensitive Data vulnerability in Apache Tomcat due to the fix for CVE-2026-29146...
Malicious code in permit2 (npm)
permit2 is a malicious npm package that squats the bare name of Uniswap's Permit2 token-approval system whose legitimate npm distribution is the scoped @uniswap/permit2-sdk, advertising itself as a "smart contract development toolkit." The package contains no real functionality — the published...
CVE-2026-68132
In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices dothawallcallback calls bdevthaw while holding sb-sumount exclusively. If the block device was frozen via bdevfreeze dropping the last block layer freeze reference calls...
MAL-2026-13775 Malicious code in permit2 (npm)
permit2 is a malicious npm package that squats the bare name of Uniswap's Permit2 token-approval system whose legitimate npm distribution is the scoped @uniswap/permit2-sdk, advertising itself as a "smart contract development toolkit." The package contains no real functionality — the published...
MAL-2026-13735 Malicious code in @aerodrome-finance/slipstream (npm)
@aerodrome-finance/slipstream is a malicious npm package that impersonates Aerodrome Finance's Slipstream concentrated-liquidity AMM. It carries no legitimate functionality; the published tarball contains only a package.json and an install-time payload index.js. Both preinstall and postinstall ru...
MAL-2026-13772 Malicious code in camelot-ammv2-core (npm)
camelot-ammv2-core is a malicious npm package that impersonates Camelot DEX's AMM v2 core contracts. It carries no legitimate functionality; the published tarball contains only a package.json and an install-time payload index.js. Both preinstall and postinstall run node index.js || true, so the...
MAL-2026-13774 Malicious code in augustdigital-sdk (npm)
augustdigital-sdk is a malicious npm package — an unscoped brand-hijack of the legitimate, actively-maintained scoped package @augustdigital/sdk. Version 8.20.1 was copied verbatim from the genuine @augustdigital/[email protected] release published 2 hours earlier to masquerade as a legitimate mirror or...
The vulnerability of the CubeSize() function in the cmslut.c component of the Little CMS color management library allows a hacker to access confidential data and also trigger a service failure.
The vulnerability of the CubeSize function in the cmslut.c component of the Little CMS color management library is related to the improper execution of certain operations. Exploiting this vulnerability could allow an attacker to access confidential data and also cause service interruptions...
The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL, related to copying buffers without checking input data, allows a perpetrator to cause a service failure.
The vulnerability of the library for accessing functions of the cryptographic library OpenSSL PyOpenSSL is related to the copying of buffers without checking the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the Python programming language interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.
The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to compromise data integrity...
The vulnerability of the Firewalld firewall configuration program, related to improper execution permissions, allows a intruder to compromise data integrity.
The vulnerability of the Firewalld firewall configuration program is related to improper execution permissions. Exploiting this vulnerability could allow an attacker to compromise data integrity...
The vulnerability of the `_flatten` and `_isEqual` functions in the JavaScript library for working with arrays, Underscore, allows attackers to cause a service failure.
The vulnerability of the flatten and isEqual functions in the JavaScript library for working with arrays, Underscore, is related to the allocation of unlimited memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
The vulnerability of the nspawn component of the initialization and service management subsystem of Systemd allows a attacker to cause a service failure.
The vulnerability of the nspawn component in the Systemd service initialization and management subsystem is related to the use of an unreliable source. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-68104
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pmgenpdremove before freeing genpd Call pmgenpdremove to unregister from global list prior to releasing acpgenpd memory, and clear the pointer after free. cherry picked from commit...
Exploit for Use After Free in Linux Linux_Kernel
GhostLock-X200 v1.0!Versionhttps://img.shields.io/badge/ver...
CVE-2026-8718
tlsoptdtlspeerconnectionidvalueget in subsys/net/lib/sockets/socketstls.c, which handles getsockoptSOLTLS, TLSDTLSPEERCIDVALUE, passed the caller-supplied optval directly to mbedtlssslgetpeercid without verifying the buffer was at least MBEDTLSSSLCIDOUTLENMAX default 32 bytes. mbedtlssslgetpeerci...
CVE-2026-11812
The UpdateHub management subsystem subsys/mgmt/updatehub/updatehub.c drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds1. Access to ctx was not serialized, and preparef...