55015 matches found
MAL-2026-11461 Malicious code in eth-bridge (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d7fbf15a08eb3568d462e06fa345cfdb59afe88bf38b63e47ecea29ea92c009 The package presents itself as an Ethereum bridge library but its index.js is a verbatim copy of the well-known eth-sig-util signature utility...
MINI-QMM3-3VCP-GV55
Bulletin has no description...
MINI-2GXV-968H-M5C6
Bulletin has no description...
MINI-RJX4-2HJJ-R3CC
Bulletin has no description...
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
Device code phishing - the abuse of the OAuth 2.0 device authorization grant to steal access tokens - has evolved from a niche red-team technique to an industrial-scale threat in under six months. Designed for input-constrained devices like smart TVs, printers, and so on, the device authorization...
Exploit for Use After Free in Linux Linux_Kernel
CVE-2026-43499 vivo PD2425 Exploit Adaptation Project A porti...
CVE-2026-18452
DMS+ Non-Mobile developed by Rich Source has a Use of Hard-coded Credentials vulnerability. Unauthenticated remote attackers can exploit a fixed API key to gain control over all installed DMS+ devices...
Cisco IOS Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
According to its self-reported version, Cisco IOS is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the device to...
Oracle Linux 8 : kernel (ELSA-2026-45115)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-45115 advisory. - KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Aidan Wallace RHEL-213341 CVE-2026-63807 - KVM: x86: Don't recheck L1...
The vulnerability of the atmio16d_attach() function in the drivers/comedi/drivers/ni_atmio16d.c module allows a remote attacker to cause a service failure for Linux operating system device drivers.
The vulnerability of the atmio16dattach function in the drivers/comedi/drivers/niatmio16d.c module relates to the pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...
Cisco Adaptive Security Appliance (ASA) Software IKEv2 Multiple Vulnerabilities (cisco-sa-asa-ftd-ios-dos-DOESHWHy)
According to its self-reported version, Cisco ASA Software is affected by multiple vulnerabilities. - A vulnerability in the IKEv2 feature of Cisco IOS Software, IOS XE Software, Secure Firewall ASA Software, and Secure FTD Software could allow an unauthenticated, remote attacker to cause the...
SUSE CVE-2026-62429
Accessing the vNUMA configuration data of a guest is still possible when domain destruction has already started. The cleaning up of that configuration information is not synchronized with its retrieval by a device model controlling the guest...
JLSEC-2026-1045 ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark()...
ImageMagick before 7.1.2-13 contains a memory leak vulnerability in LoadOpenCLDeviceBenchmark function when parsing malformed OpenCL device profile XML files with unclosed device elements. Attackers with write access to the OpenCL cache directory can place malicious XML files to exhaust memory an...
MINI-M78G-GRX4-C495
Bulletin has no description...
CVE-2026-22622
Improper input validation in one of the session management interface of Eaton's Tripp Lite series PADM firmware could allow an authenticated user to elevate privileges resulting in unrestricted access to the device...
CVE-2026-64476
A flaw was found in the Linux kernel's vfio/pci driver. The disableidled3 flag, which controls device power states, was handled as a global module parameter instead of being latched per device. This improper handling could lead to unbalanced Power Management PM operations for devices already boun...
CVE-2026-64447
A flaw was found in the Linux kernel's ipu7 media driver. This vulnerability involves incorrect memory management where memory can be freed multiple times and subsequently accessed after it has been freed, specifically during error handling paths in device initialization. A local attacker could...
CVE-2026-44090
Due to missing authentication, an unauthenticated remote attacker may access the MQTT broker, which is only protected from external access by a firewall. This may lead to the device being fully compromised...
EUVD-2026-51038
An unauthenticated remote attacker can inject malicious firmware into the internal charging module because the JupiCore service transmits firmware updates without performing integrity or verification check. Successful exploitation may compromise the integrity of the affected device. This...