CVE-2026-38360

CVE-2026-38360: Path Traversal in dash-uploader Unauthenticated path traversal in fohrloop/dash-uploader Python, PyPI allowing arbitrary file write, leading to but not limited to Remote Code Execution RCE , application source code overwrite, stored XSS, and persistent backdoor installation. ⚠️ No...

jwt-hack

JSON Web Token Hack Toolkit A high-performance toolkit for testing, analyzing and attacking JSON Web Tokens. Installation Cargo cargo install jwt-hack Homebrew brew install jwt-hack Snapcraft Ubuntu sudo snap install jwt-hack Chocolatey Windows choco install jwt-hack From source git clone...

CVE-2025-55886

CVE-2025-55886 Description An Insecure Direct Object Reference IDOR vulnerability was discovered in ARD. The flaw exists in the feuid parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without...

PT-2026-122058

In the Linux kernel, the following vulnerability has been resolved: bnxt en: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NO PASID Request...

PT-2026-116099

🚨 CVE-2026-111700 WebVella ERP through 1.8.8 contains an sql injection vulnerability that allows any authenticated user to inject SQL through WHERE-clause text literals in the EQL query API. Attackers can send crafted single-quoted literals to POST /api/v3/en US/eql, escaping the unsanitized...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bnxten: Avoid order-5 memory allocation for TPA data. The driver needs to keep track of all possible concurrent TPA GRO/LRO completions on the aggregation ring. On P5 chips, the maximum number of concurrent TPA is 256, and the...

Malicious Package

Overview git-en-boite-logging is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in git-en-boite-logging (npm)

Source: amazon-inspector f6ebee9f4428d7f14f6f941438064715c8bece34c5fe6bfedf32bbd8cba226c0 package.json declares a preinstall lifecycle hook that runs wget to a hardcoded webhook.site collector URL https://webhook.site/3fcfa5af-1b4e-4556-9d48-26190d02795f/, passing $whoami, $hostname, and $pwd as...

Malicious code in git-en-boite-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee9f4428d7f14f6f941438064715c8bece34c5fe6bfedf32bbd8cba226c0 package.json declares a preinstall lifecycle hook that runs wget to a hardcoded webhook.site collector URL...

MAL-2026-17214 Malicious code in git-en-boite-logging (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f6ebee9f4428d7f14f6f941438064715c8bece34c5fe6bfedf32bbd8cba226c0 package.json declares a preinstall lifecycle hook that runs wget to a hardcoded webhook.site collector URL...

PT-2026-98514

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function performs a shallow copy of the live RX ring into a clone. While some pointers are cleared, rx tpa and rx tpa...

PT-2026-98511

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt queue mem alloc function fails to propagate return values from bnxt alloc one tpa info data. When bnxt alloc one tpa info data return...

PT-2026-98512

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the bnxt init nic function fails to propagate error return values from bnxt init rx rings. When bnxt alloc one rx ring fails, the return value...

PT-2026-98509

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the queue can stop and fail to restart. This occurs when the driver receives a burst of packets and marks Buffer Descriptors BD with the NO CM...

PT-2026-98510

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds write issue exists in the bnxt en driver. The bnxt alloc agg idx function is designed to map firmware TPA IDs to software IDs used to index the rxr-rx tpa array. When th...

ROS-20260924-73-0064

The vulnerability of the mlx5eptpopen function in the drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c driver for Mellanox Ethernet network adapters in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failur...

PT-2026-94449

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the bnxt en driver where the hwmon notify event function is called using the platform device as the first parameter instead of the required hardware monitoring device...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: bnxten: Fixed a possible crash in bnxthwrmsetcoal During the error recovery sequence, the rtnllock is not held for the entire duration, and some data structures may be freed during this process. Instead of checking netifrunning,...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: bnxten: Adjusted the logging of firmware messages in case the token is released in hwrmsend. If the token is released because token-state equals BNXTHWRMDEFERRED, the released token set to NULL is used in log messages. This issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: bnxten: Correctly sets the DMA unmap len for XDPREDIRECT. When transmitting an XDPREDIRECT packet, call dmaunmaplenset with the correct length instead of 0. This bug triggers this warning on a system with IOMMU enabled: WARNIN...