CVE-2026-46257

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

CVE-2026-46257

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

CVE-2026-46257

CVE-2026-46257 concerns the Linux kernel SP804 timer driver on ARM32. The issue occurs when the delay timer shares the same clkevt instance with sched_clock; if sp804_clocksource_and_sched_clock_init runs with use_sched_clock != 1, sched_clkevt may be uninitialized, and read_current_timer() ends ...

CVE-2026-46257 clocksource/drivers/timer-sp804: Fix an Oops when read_current_timer is called on ARM32 platforms where the SP804 is not registered as the sched_clock.

In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/timer-sp804: Fix an Oops when readcurrenttimer is called on ARM32 platforms where the SP804 is not registered as the schedclock. On SP804, the delay timer shares the same clkevt instance with schedclock. On so...

CVE-2026-35081

creationtimestamp| type| source ---|---|--- 2026-06-03 13:10:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf6ny6u772v 2026-06-03 21:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnfywe2uj72n 2026-06-09 00:37:07+00:00| seen|...

CVE-2026-35085

creationtimestamp| type| source ---|---|--- 2026-06-03 12:51:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf5lbwf2m2m 2026-06-08 20:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnsib2j5av2e 2026-07-03 23:47:31+00:00| seen|...

CVE-2026-49975

creationtimestamp| type| source ---|---|--- 2026-06-03 12:19:44+00:00| seen| https://bsky.app/profile/hmier.bsky.social/post/3mnf3sod7zs24 2026-06-03 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1898 2026-06-03 21:00:04+00:00| seen| https://t.me/GithubRedTeam/87196...

CVE-2026-47065

creationtimestamp| type| source ---|---|--- 2026-06-03 11:49:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnf24u465g2o 2026-06-04 03:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mngn33wfwh2l 2026-06-04 06:58:35+00:00| seen|...

CVE-2026-10621

creationtimestamp| type| source ---|---|--- 2026-06-03 03:00:53+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mne4le5pgz2r...

CVE-2026-39552

creationtimestamp| type| source ---|---|--- 2026-06-03 02:00:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mndza6m4472n...

From Attack Simulation to SIEM Rule: Deterministic Detection-As-Code Synthesis with Probe-Level Traceability

Security teams routinely simulate attacks against their own systems to check whether their monitoring would catch a real intruder. These Breach-and-Attack-Simulation BAS tools surface findings, but the security information and event management SIEM systems that watch production need detection rul...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the timer-sp804 clock source driver sharing the same clkevt instance when it is not registered as...

PT-2026-46020

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A kernel Oops occurs on ARM32 platforms when the read current timer function is called and the SP804 is not registered as the sched clock. This happens because the delay timer shares a...

PT-2026-46306

Name of the Vulnerable Software and Affected Versions matrix-sdk-ui versions prior to 0.16.1 Description The message edit validation logic is missing a check when replacing an encrypted event, as the replacement event is not required to be encrypted. This allows a malicious homeserver administrat...

CVE-2026-46764

The Event Log detail endpoint GET /api/v2/eventLogs/eventlogid in Apache Airflow fetched audit-log rows directly by numeric ID after only the generic Audit Log permission check, while the collection endpoint GET /api/v2/eventLogs applied per-Dag scoping. An authenticated UI/API user with audit-lo...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code containing a malicious binding.gyp file that drops and runs a self-propagating cloud secret stealer. The malicious code attempts to exfiltrate AWS, GCP, Azure, Vault, and Kubernetes credentials, as well as npm an...

CVE-2026-48597

creationtimestamp| type| source ---|---|--- 2026-06-02 20:46:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mndhnkma2l2j 2026-07-10 01:12:43+00:00| seen| https://gist.github.com/alon710/c57bf8187a7fb4d8c5e9247f7948a17b 2026-07-10 02:35:05+00:00| published-proof-of-concept|...

CVE-2017-8798

creationtimestamp| type| source ---|---|--- 2026-06-02 09:00:04+00:00| seen| Telegram/ewCNvksQ23LcKFOZP4S7JiAVBKfvwBJJ-Max0Hr7r6pTH0...

Vivotek FD8136 安全漏洞

Vivotek FD8136 is a hemispherical network camera produced by the Chinese company Vivotek. The Vivotek FD8136 FD8136-VVTK-0300a version contains a security vulnerability. This vulnerability stems from a remote buffer overflow attack on the /cgi-bin/admin/eventtask.cgi endpoint. It could allow...

EUVD-2026-33699

FlexRIC v2.0.0 crashes when the iApp receives an E42RICSUBSCRIPTIONREQUEST with an empty ricEventTriggerDefinition field. The E42 layer decoder accepts this as valid, but the E2AP encoder asserts a non-empty constraint when forwarding the request. A remote unauthenticated attacker can crash the...