PT-2026-110639

Name of the Vulnerable Software and Affected Versions hexpm hex versions 0.0.1 through 2.5.1 Description Improper neutralization of escape, meta, or control sequences allows a malicious package publisher or a hostile repository server to inject terminal control sequences into the output of Mix...

PT-2026-110633

Name of the Vulnerable Software and Affected Versions hexpm hex versions 2.5.0 through 2.5.1 Description A protection mechanism failure allows a package owner or an attacker with account access to bypass the release-age cooldown. The cooldown, configured via cooldown or HEX COOLDOWN, normally...

PT-2026-110795

Name of the Vulnerable Software and Affected Versions rebar3 versions 3.9.1 through 3.27.2 hex versions 2.1.0 through 2.5.1 hex core versions 0.1.0 through 0.19.9 Description Improper handling of highly compressed data leads to a data amplification issue where an untrusted repository mirror or a...

PT-2026-110581

Name of the Vulnerable Software and Affected Versions hex core versions 0.1.0 through 0.19.9 Description Improper certificate validation in hex core allows an attacker capable of intercepting HTTPS connections to impersonate hex.pm, repo.hex.pm, or other repository and API servers. This occurs wh...

PT-2026-110870

Name of the Vulnerable Software and Affected Versions gleam versions 0.32.4 through 1.19.1 Description A path traversal issue exists where a malicious package publisher can cause the deletion of directories outside the project build directory. This occurs because Gleam reads the app field from th...

PT-2026-110612

Name of the Vulnerable Software and Affected Versions hexpm hex versions 0.20.2 through 2.5.1 Description Improper certificate validation allows an attacker capable of intercepting HTTPS connections to impersonate a Hex host. This occurs when users configure cacerts path or HEX CACERTS PATH to a...

PT-2026-110632

Name of the Vulnerable Software and Affected Versions hexpm hex versions 0.20.2 through 2.5.1 Description Improper validation of integrity check values allows a package mirror to substitute a tarball when using the mix hex.package fetch PACKAGE VERSION --output - command. Hex typically compares a...

CVE-2026-105280: Improper Validation of Integrity Check Value

Improper Validation of Integrity Check Value vulnerability in hexpm hex allows a package mirror to substitute the tarball that mix hex.package fetch PACKAGE VERSION --output - writes to standard output. Hex compares a fetched tarball's inner and outer checksums with the repository's signed regist...

CVE-2026-105274: Improper Handling of Highly Compressed Data (Data Amplification)

Improper Handling of Highly Compressed Data Data Amplification vulnerability in hexpm hexcore allows an untrusted repository mirror, or a server answering hexcore's API requests, to exhaust the memory of the Erlang VM running hexcore. The same code is vendored in Hex mixhexrepo, mixhexapi and...

CVE-2026-103503: Improper Certificate Validation

Improper Certificate Validation vulnerability in hexpm hex allows an attacker who can intercept HTTPS connections, and holds a certificate for a Hex host issued by a CA in Hex's bundled CA store, to impersonate that host to users who set cacertspath to a CA store that leaves that CA out...

CVE-2026-105668: Protection Mechanism Failure

Protection Mechanism Failure vulnerability in hexpm hex allows the owner of a package, or an attacker who has taken over the owner's account, to get a newly published release past the release-age cooldown. The cooldown cooldown config, HEXCOOLDOWN withholds versions younger than the configured ag...

bytesrevealer

https://bytesrevealer.online/ VULNEX https://www.vulnex.com/ Bytes Revealer Versión: 0.4 Bytes Revealer es una potente herramienta de ingeniería inversa y análisis binario diseñada para investigadores de seguridad, analistas forenses y desarrolladores. Con funciones como vista hexadecimal,...

fhex

Fhex - Un Editor Hex Completamente Funcional Este proyecto nace con el objetivo de desarrollar una herramienta ligera pero útil. La razón es que los editores hex existentes tienen algunas limitaciones diferentes por ejemplo, demasiadas dependencias, falta de características de coloreado hex, etc...

haruspex

haruspex "Hacking is the discipline of questioning all your assumptions all of the time." -- Dave Aitel Haruspex is a blazing-fast IDA headless plugin that extracts pseudocode generated by IDA's decompiler in a format that should be suitable to be imported into an IDE, or parsed by static analysi...

bst

Binary String Toolkit Resumen El Binary String Toolkit o BST, para abreviar, es una utilidad bastante simple para convertir cadenas binarias a varios formatos adecuados para su inclusión en códigos fuente, como los utilizados para desarrollar exploits y Pruebas de Concepto en el campo de la...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cfg80211: The PMK parameter is now passed as binary data, rather than hexadecimal data. It appears that the hexadecimal passphrase mechanism does not work on newer chips/firmwares e.g., BCM4387. There was actually...

Linux Distros Unpatched Vulnerability : CVE-2026-32148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Verification of Data Authenticity vulnerability in hexpm hex Hex.RemoteConverger module allows dependency integrity bypass via unverified lockfile...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-76504 Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and poses...

Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability

Cisco Catalyst SD-WAN Manager contains a hex encoding vulnerability that could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user due to improper handling of URI encoding in an HTTP request...

a3mo_lib (>=0.1.0, <=0.1.1), android-abx (0.1.0) +69 more potentially affected by unknown CVE via faster-hex (>=0.3.1, <=0.10.0)

faster-hex CARGO version =0.3.1, =0.1.0, =4.0.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.37.0-pre, =0.1.0, =0.37.0-pre, =0.37.0-pre, =1.1.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0306...