Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...

BlackSheep 注入漏洞

BlackSheep is an open source web application framework from Neoteroi. BlackSheep version 2.4.6 before the injection vulnerability , the vulnerability stems from the HTTP client-side implementation of the lack of header validation , which could lead to an attacker to modify the HTTP request or...

PT-2026-2566

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

PT-2026-2560

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68955 Description A multi-thread race condition exists in the card framework module. Successful exploitation could impact availability. Recommendations At the moment, there is no information about a newer version that...

PT-2026-2561

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68956 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about ...

PT-2026-2562

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-68957 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may affect system availability. Recommendations At the moment, there is no information about ...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Camera Framework module, which can be exploited by an attacker to cause...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded race condition vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause availabili...

PT-2026-2565

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68960 Description A multi-thread race condition exists in the video framework module. Successful exploitation of this issue may affect availability. Recommendations At the moment, there is no information about a newer...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Card Framework module, which can be exploited by an attacker to cause...

PT-2026-2567

Multi-thread race condition vulnerability in the camera framework module. Impact: Successful exploitation of this vulnerability may affect availability...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Video Framework module, which can be exploited by an attacker to cause...

MiracleLinux 4 : raptor-1.4.18-5.AXS4.1 (AXSA:2012-453:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-453:01 advisory. Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security issues fixe...

MiracleLinux 4 : php-pear-1.9.4-4.AXS4 (AXSA:2012-73:01)

The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2012-73:01 advisory. PEAR is a framework and distribution system for reusable PHP components. This package contains the basic PEAR components. Security issues fixed with this...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001731)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001731 advisory. A race condition was found in the Linux kernel's IP framework for transforming packets XFRM subsystem when multiple calls to xfrmprobealgs occurred simultaneously...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A multi-threaded conditional contention vulnerability exists in the Huawei HarmonyOS Camera Framework module, which can be exploited by an attacker to cause...

PT-2026-2563

Name of the Vulnerable Software and Affected Versions versions prior to 2025-68958 Description A multi-thread race condition exists within the card framework module. Successful exploitation of this issue may impact system availability. A race condition occurs when multiple threads access and...

MiracleLinux 4 : qpid-tools-0.14-6.AXS4, qpid-qmf-0.14-14.AXS4, qpid-cpp-0.14-22.AXS4, python-qpid-0.14-11.AXS4 (AXSA:2012-1014:04)

The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2012-1014:04 advisory. qpid-tools: Management and diagnostic tools for Apache Qpid brokers and clients. qpid-qmf-: An extensible management framework layered on Qpid messaging...

CVE-2025-68622

Espressif ESP-IDF USB Host UVC Class Driver allows video streaming from USB cameras. Prior to 2.4.0, a vulnerability in the esp-usb UVC host implementation allows a malicious USB Video Class UVC device to trigger a stack buffer overflow during configuration-descriptor parsing. When UVC...

CVE-2026-22688

WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval. Prior to version 0.2.5, there is a command injection vulnerability that allows authenticated users to inject stdioconfig.command/args into MCP stdio settings, causing the server to execute...