6498 matches found
SUSE CVE-2026-46403
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
EUVD-2026-49931
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at...
CVE-2026-48025 nebula-mesh: Decrypted CA private key persists in heap after signing
nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.7, internal/pki/resolver.go:36-64 constructs a CAManager with the plaintext ed25519.PrivateKey after unwrapping via the master key; internal/pki/ca.go:13-16 stores it. Callers at...
WordPress Formidable Forms Signature Online Contract Automation plugin <= 2.0.1 - Insecure Direct Object References (IDOR) vulnerability
Insecure Direct Object References IDOR vulnerability discovered by Abdullah Kareem "cyberkareem" in WordPress Plugin Formidable Forms Signature Online Contract Automation versions = 2.0.1...
PT-2026-68541
Name of the Vulnerable Software and Affected Versions Formidable Forms Signature Online Contract Automation versions prior to 2.0.2 Description An Insecure Direct Object Reference IDOR exists due to missing validation on a user controlled key. This allows unauthenticated attackers to perform...
echidna v2.3.3
Echidna: A Fast Smart Contract Fuzzer Echidna is a weird creature that eats bugs and is highly electrosensitive with apologies to Jacob Stanley More seriously, Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based...
CVE-2026-64368
In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...
CVE-2026-64433
CVE-2026-64433 is a Use-After-Free in the Linux kernel's Bluetooth MGMT subsystem (net/bluetooth/mgmt.c). The function add_device_complete() calls hci_conn_params_lookup() and reads params->flags without holding hci_dev_lock, allowing a concurrent MGMT_OP_REMOVE_DEVICE to free the underlying o...
CVE-2026-64368 mm/slab: do not limit zeroing to orig_size when only red zoning is enabled
In the Linux kernel, the following vulnerability has been resolved: mm/slab: do not limit zeroing to origsize when only red zoning is enabled When init zeroing on allocation is requested, for kmalloc we generally have to zero the full object size even if a smaller size is requested, in order to...
SUSE CVE-2026-64232
In the Linux kernel, the following vulnerability has been resolved: block: recompute nrintegritysegments in blkinsertclonedrequest blkinsertclonedrequest already recomputes nrphyssegments against the bottom queue, because "the queue settings related to segment counting may differ from the origina...
PT-2026-64589
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the slab memory allocator where the zeroing process during allocation is incorrectly limited when only red zoning is enabled. When kmalloc is used with a request for...
EUVD-2026-47275
Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise...
EUVD-2026-47147
Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite component: Internal Operations. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project...
CVE-2026-61063
Vulnerability in the PeopleSoft Enterprise SCM Supplier Contract Management product of Oracle PeopleSoft component: Security. The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where PeopleSoft Enterprise...
CVE-2026-46403
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
CVE-2026-46403
Summary (verified): Klever-Go KVM read-only execution can leak state changes via contract delete/upgrade side effects when invoked through ExecuteReadOnlyWithTypedArguments. The root cause is applying read-only as runtime state while not enforcing it in state-changing host-core paths, allowing a ...
CVE-2026-46403 Klever-Go KVM read-only execution can commit contract delete and upgrade side effects
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
CVE-2026-46403 Klever-Go KVM read-only execution can commit contract delete and upgrade side effects
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
CVE-2026-46403 Klever-Go KVM read-only execution can commit contract delete and upgrade side effects
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.17, KVM exposes ExecuteReadOnlyWithTypedArguments as a read-only execution mechanism. The hook saves the previous read-only state, sets runtime.SetReadOnlytrue, executes the destination context, and then restores t...
PT-2026-62952
Name of the Vulnerable Software and Affected Versions Oracle PeopleSoft Enterprise SCM Supplier Contract Management version 9.2 Description A security flaw in the Security component allows a low-privileged attacker with access to the infrastructure where the software executes to compromise the...