270 matches found
CVE-2026-106040 Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC
Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the cororpc master port can evict DISK replicas across all tenants,...
CVE-2025-70342
CVE-2025-70342: Credential Interception via Named Pipe in erase-install Summary erase-install prior to v40.4 commit 2c31239 writes swiftDialog credential output to a hardcoded path /var/tmp/dialog.json. On Apple Silicon Macs, admin credentials entered during reinstall/erase operations are written...
TOTOLINK T6: Vulnerability due to improper access control
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from incorrect access control in the clearSyslog function. Attackers can exploit this vulnerability by sending specially crafted POST...
TOTOLINK T6 Access Control Vulnerability (CNVD-2026-38582)
TOTOLINK T6 is a wireless dual-band Mesh router launched by TOTOLINK. The TOTOLINK T6 has a vulnerability related to access control. This vulnerability stems from an improper access control in the clearDiagnosisLog function. Attackers can exploit this vulnerability by sending a specially crafted...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: The issue of out-of-bounds access during the spinorseterasetype function has been fixed. The spinorseterasetype function was used either to set or to mask an erase type. When it was used to mask an erase type, an...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: - Block: Fixed integer overflow in BLKSECDISCARD. - I independently rediscovered this issue by making the commit: 22d24a544b0d49bbcbd61c8c0eaf77d3c9297155. - Block: Fixed overflow in blkioctldiscard. But there’s still a proble...
Astra Linux – Vulnerability in Vim
A heap-based buffer overflow vulnerability exists in the cmdlineerasechars function in the GitHub repository for Vim/Vim, prior to version 8.2.4899. These vulnerabilities could cause software to crash, modify memory, and potentially allow for remote execution...
CVE-2026-51741: Improper Access Control
Incorrect access control in the clearDiagnosisLog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase diagnosis logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51737: Improper Access Control
Incorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase traceroute logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-51736: Improper Access Control
Incorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to erase system logs via sending a crafted POST request to /cgi-bin/cstecgi.cgi...
CVE-2026-70412
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-70412
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-70412
Dell iDRAC9 (pre-7.20.30.50) and iDRAC10 (pre-1.20.60.50) expose remanent data after memory erase, enabling a low-privileged remote attacker to disclose information. CVSS 3.5 (LOW) requires low privileges and user interaction. No exploit code or in-the-wild exploitation is documented; apply Dell ...
EUVD-2026-60175
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-70412
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-70412
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
PT-2026-76645
Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent Data Readable after Memory Erase vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Remove the reference to the translation cache only for the erased entry. The vgicitsinvalidatecache function iterates through the per-ITS translation cache using xaforeach, and removes the cache reference fo...
MAL-2026-10796 Malicious code in @gocortexio/npmgremlinbox-cc-by-nc-3-0-de (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac07dbbcaab394576264b09782849aa49feace0efe500ab7e1f0967a10649718 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
