fat-finger

Fat-Finger Extends the original finger.nse and attempts to enumerate current logged on users through a full match of the username and a partial match of the GECOS field in /etc/passwd Example output: @output PORT STATE SERVICE 79/tcp open finger | fat-finger: finger: admin: no such user. | finger...

PT-2026-92298

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A heap buffer overflow in the gf base update finger base function within gf base.c allows for an out-of-bounds write. This issue can be exploited to achieve loca...

SUSE CVE-2026-80566

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

CVE-2026-80574

In the Linux kernel, the following vulnerability has been resolved: Input: focaltech - fix array out-of-bounds in focaltechprocessrelpacket Make finger2 and also finger1 unsigned, so that if the finger index in the packet is 0 then subtracting 1 creates an array index which overflows above the...

AZL-97709 CVE-2026-80566 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

CVE-2026-80566

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

UBUNTU-CVE-2026-80566

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

CVE-2026-80574

CVE-2026-80574 is an array out-of-bounds write in the Linux kernel's Focaltech input driver, specifically in the focaltech_process_rel_packet function. The root cause is that the finger1 and finger2 variables are signed; when a packet carries a finger index of 0, subtracting 1 yields -1 , which b...

CVE-2026-80566

This Linux kernel vulnerability affects the hynitron_cstxxx input driver. The root cause is insufficient validation of touch count and finger IDs against the allocated input slot range before processing touch reports. An out-of-range finger ID or an oversized touch count can corrupt the touch sta...

CVE-2026-80566 Input: hynitron_cstxxx - validate touch count and finger IDs

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

CVE-2026-80566 Input: hynitron_cstxxx - validate touch count and finger IDs

In the Linux kernel, the following vulnerability has been resolved: Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. The current check allows a finger ID equal to maxtouchnum to reach...

PT-2026-82182

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw in the hynitron cstxxx driver allows for the corruption of the touch state of previously active slots. This occurs because the driver fails to properly validate the touch count an...

Linux Distros Unpatched Vulnerability : CVE-2026-80566

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Input: hynitroncstxxx - validate touch count and finger IDs The driver allocates maxtouchnum input slots, which are indexed from zero through maxtouchnum - 1. T...

FreeBSD : zeek -- potential DoS vulnerabilities (d47e608f-2e2a-4366-ad17-ce2480bf912d)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the d47e608f-2e2a-4366-ad17-ce2480bf912d advisory. Tim Wojtulewicz of Corelight reports: The NVT, Rlogin, and RSH analyzers have received fixes to avoid...

zeek -- potential DoS vulnerabilities

Tim Wojtulewicz of Corelight reports: The NVT, Rlogin, and RSH analyzers have received fixes to avoid unbounded state growth. Due to the fact that these packets can be received from remote hosts, these are considered DoS risks. A specially crafted WebSocket payload can cause the Spicy WebSocket...

CVE-2026-8664

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction...

CVE-2026-8664 OS Command Injection in Rapid7 InsightConnect Finger Plugin

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction...

CVE-2026-8664

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction...

CVE-2026-8664

Summary (CVE-2026-8664): OS Command Injection in the Rapid7 InsightConnect Finger Plugin for Linux. The vulnerability arises from insufficient input validation in shell command construction, enabling authenticated attackers to execute arbitrary OS commands via the user or host parameters. Affecte...

EUVD-2026-39159

OS Command Injection vulnerability in Rapid7 InsightConnect Finger Plugin on Linux allows authenticated attackers to execute arbitrary OS commands via the user or host parameters due to insufficient input validation in shell command construction...