SUSE CVE-2026-74346

In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Fix OOB read during CQ MR registration Sashiko pointed out an unrelated bug during a previous patch: https://sashiko.dev//patchset/20260512183852.614045-1-jmoroni%40google.com This change fixes the bug by eliminating...

Beyond the Trust Boundary: A Critical Reassessment of the FIDO2 Threat Model

FIDO2/WebAuthn has been widely deployed as a phishing-resistant authentication scheme. Because FIDO2 relies on public-key cryptography and hardware-backed authenticators, its security is often assumed to be guaranteed by design, provided that the cryptographic implementation is correct. In this...

SUSE CVE-2026-72340

In the Linux kernel, the following vulnerability has been resolved: net: microchip: vcap: fix races on the shared Super VCAP block The VCAP instances on a chip are not independent, yet they are locked independently. On sparx5 and lan969x the IS0 and IS2 instances are backed by the same Super VCAP...

chipsec v2.0.8

CHIPSEC: Platform Security Assessment Framework CHIPSEC is a framework for analyzing the security of PC platforms including hardware, system firmware BIOS/UEFI, and platform components. It includes a security test suite, tools for accessing various low level interfaces, and forensic capabilities...

PUB-A-508686241

In Vp9DecEndOfStream of vp9hwdoutput.cc, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

USBvalve v1.0.1

!NOTE USBvalve Version 1.0.0 A complete rewrite of the application has been done: moved away from Arduino IDE environment, now the code is written for the Pi Pico SDK dependencies on external libraries have been reduced a lot USB host support for Low Speed devices is now more robust ATTiny85,...

awesome-connected-things-sec — Updated!

🔐 Awesome Connected Things Security Resources Security research and exploitation techniques for IoT, embedded, industrial, and automotive systems. !https://img.shields.io/badge/%F0%9F%A4%96ROBOTICS-ROS&DDS...

Linux Distros Unpatched Vulnerability : CVE-2026-80641

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK...

ASIS-CTF-Quals-2026

ASIS CTF Quals 2026 — Writeups Solutions, exploits, and write...

HSMLog: Small Language Model-Assisted Hardware Security Module Log Anomaly Detection with Behavioral Analysis

Hardware Security Module HSM logs capture security-critical behavior, but anomalies emerge from relationships across event sequences, keys, object states, sessions, and temporal patterns rather than isolated events. Existing methods separate detection from HSM-specific evidence validation and...

SUSE CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

UBUNTU-CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

EUVD-2026-67517

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

CVE-2026-80641 wifi: wlcore: enable the right set of ciphers

In the Linux kernel, the following vulnerability has been resolved: wifi: wlcore: enable the right set of ciphers The firmware version number check for IGTK introduced in commit c34dbc5900b0 "wifi: wlcore: Add support for IGTK key" lets the amount of ciphers decrease on every boot of a too old...

zupt

Project archived. For newest versions and updates check it out. Compress everything. Trust nothing. Encrypt always...

The vulnerability of the QEMU hardware emulation software, related to executing a loop with an unavailable exit condition, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow a perpetrator to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to incorrect calculation of buffer size, allows a hacker to trigger a service failure.

The vulnerability of the QEMU hardware emulation software is related to incorrect calculation of buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the QEMU hardware emulation software, related to reading data beyond the buffer’s allowed limits, allows a hacker to gain access to confidential data.

The vulnerability of the QEMU hardware emulation software is related to reading data from buffer registers beyond their allowable limits. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...