iPhoneRestrictionsPasscodeBF

iPhoneRestrictionsPasscodeBF Инструмент iPhoneRestrictionsPasscodeBF ищет резервную копию iPhone любой версии iOS на компьютере с Windows. Если такая копия существует, инструмент ищет в ней ограничительный пароль Restriction Passcode. Ограничительный пароль — это 4-значный код, используемый на...

CVE-2026-88344

An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999e. When an exact-length FlatBuffers schema buffer ends with a digit, the integer digit-scan loop in lex advances past the end of the input buffer and dereferences the out-of-bounds pointer. A specially crafted schema...

CVE-2026-93574

CVE-2026-93574 affects Netty's netty-codec-http component, where an incorrect parsing of HTTP/1.1 chunk-size tokens containing post-digit whitespace enables HTTP request smuggling . A remote attacker with no privileges can exploit this over the network to bypass security controls or access unauth...

Amazon Linux 2 : perl-Date-Manip, --advisory ALAS2-2026-3856 (ALAS-2026-3856)

The version of perl-Date-Manip installed on the remote host is prior to 6.41-2. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3856 advisory. Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeri...

Important: perl-Date-Manip

Issue Overview: Date::Manip versions through 6.99 for Perl return corrupted dates via non-ASCII decimal digits that pass the numeric range tests in check. The parse regexes capture year, month and day with the \d shorthand, which on a character string matches the whole Unicode decimal digit...

EUVD-2026-55222

A time-of-check/time-of-use TOCTOU race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes...

CVE-2026-72584

A time-of-check/time-of-use TOCTOU race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes...

CVE-2026-72584 fastschema - TOCTOU Race Condition Bypasses OTP Attempt Limit in Account Recovery

A time-of-check/time-of-use TOCTOU race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes...

CVE-2026-72584 fastschema - TOCTOU Race Condition Bypasses OTP Attempt Limit in Account Recovery

A time-of-check/time-of-use TOCTOU race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes...

CVE-2026-61234

...

CVE-2026-61162

...

CVE-2026-60788

CVE-2026-60788 affects Oracle E-Business Suite, Oracle Sales Offline, Internal Operations component, versions 12.2.3–12.2.15. The vulnerability allows a low-privilege attacker with network access via HTTP to compromise Oracle Sales Offline, potentially leading to unauthorized creation, deletion o...

CVE-2026-60646

...

CVE-2026-60606

...

CVE-2026-60451

...

CVE-2026-60257

The CVE-2026-60257 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with no authentication, enabling takeover of Oracle Coherence as described in the sources. The CVSS v3...

Malicious code in vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea182e48a895e218d345ca6308727223e54eb285d9af44a167b6b115ba1a907 When the user runs vanexa-agent start, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay at...

MAL-2026-10751 Malicious code in vanexa-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5ea182e48a895e218d345ca6308727223e54eb285d9af44a167b6b115ba1a907 When the user runs vanexa-agent start, the daemon opens a persistent WebSocket to a hardcoded Cloudflare Workers relay at...

perl-DBI: perl-DBI: Heap overflow in SQL preparsing can lead to denial of service or arbitrary code execution.

A flaw was found in perl-DBI. A heap overflow vulnerability exists when preparsing SQL statements with more than 9 binders. The preparse method incorrectly allocates buffer space for SQL placeholder characters, leading to an overflow when processing binders with two or more digits. This can resul...

CVE-2026-52889

creationtimestamp| type| source ---|---|--- 2026-07-06 17:19:00+00:00| seen| https://bsky.app/profile/suriq.io/post/3mpylw6zxqa23 2026-07-06 17:28:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mpymggmgx42r 2026-08-19 16:10:54+00:00| seen|...