19 matches found
zeroboot
Sub-millisecond VM sandboxes for AI agents via copy-on-write forking Try it curl -X POST https://api.zeroboot.dev/v1/exec \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer zbdemohn2026' \ -d '"code":"import numpy as np; printnp.random.rand3"' Benchmarks Metric| Zeroboot| E2B|...
CVE-2026-98434
A flaw was found in the Linux kernel. Due to a missing range validation check in the sysctl subsystem, configured minimum and maximum limits were not enforced during specific millisecond-to-jiffies conversions. A local user with permission to modify kernel parameters could provide out-of-bounds...
CVE-2026-53321
A flaw was found in the Linux kernel's iouring subsystem, specifically in the Networked Asynchronous Packet Interface NAPI busy polling. This vulnerability allows NAPI to poll indefinitely for events when none are present, which can cause a task to become stuck. This can lead to a Denial of Servi...
GHSA-XH5J-XJFQ-QVVX stigmem-node's federation peer token timestamp validation may reject valid peer tokens
Impact A mismatch in federation peer-token timestamp handling could cause valid peer tokens to be treated as expired. Impacted deployments are Stigmem nodes using federation peer authentication paths from affected versions. The primary impact is availability and reliability of authenticated...
PT-2026-22626
Name of the Vulnerable Software and Affected Versions Textream versions prior to 1.5.1 Description Textream, a macOS teleprompter application, is susceptible to a denial-of-service condition. The DirectorServer WebSocket server does not limit concurrent connections. This, combined with a broadcas...
CVE-2025-68236
CVE-2025-68236 affects the Linux kernel’s SCSI UFS stack, specifically the ufs-qcom driver. The issue arises during the UFS power-down sequence: after SSU Power_Condition=3, hardware reset (HWRST) can wake the device firmware, causing a transient surge in ICCQ current. If the regulator is still e...
CVE-2025-68236 scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3)
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down PC=3 According to UFS specifications, the power-off sequence for a UFS device includes: - Sending an SSU command with PowerCondition=3 and await a response. - Asserting...
GiBy: a Giant-Step Baby-Step Classifier for Anomaly Detection in Industrial Control Systems
The continuous monitoring of the interactions between cyber-physical components of any industrial control system ICS is required to secure automation of the system controls, and to guarantee plant processes are fail-safe and remain in an acceptably safe state. Safety is achieved by managing...
kernel: usb: dwc3: Wait unconditionally after issuing EndXfer command
A flaw was found in the Linux kernel's USB DWC3 driver. A local attacker can cause a Denial of Service DoS by triggering a race condition during USB endpoint disconnection. When an active data transfer is cancelled, memory buffers may be unmapped while the hardware controller is still accessing...
DEBIAN-CVE-2024-36977
In the Linux kernel, the following vulnerability has been resolved: usb: dwc3: Wait unconditionally after issuing EndXfer command Currently all controller IP/revisions except DWC3usb3 = 310a wait 1ms unconditionally for ENDXFER completion when IOC is not set. This is because DWCusb3 controller...
PT-2024-23126
Name of the Vulnerable Software and Affected Versions DIRAC versions prior to 8.0.41 Description DIRAC is a software framework for distributed computing. During the proxy generation process, such as when using dirac-proxy-init, unauthorized users on the same machine can gain read access to the...
GHSA-M489-XR35-FJXR Regular Expression Denial of Service in millisecond
Versions of millisecond prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. Proof of concept var ms = require'millisecond'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result + chr;...
Regular Expression Denial of Service in millisecond
Versions of millisecond prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. Proof of concept var ms = require'millisecond'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result + chr;...
access-control (0.0.7), destiny-api (1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1, <=0.1.1)
millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: GHSA-M489-XR35-FJXR...
access-control (0.0.7), destiny-api (1.0.0) +11 more potentially affected by unknown CVE via millisecond (>=0.0.1, <=0.1.1)
millisecond NPM version =0.0.1, =0.11.0, =0.0.0, =0.0.1, =0.4.0, =0.0.1, =1.0.0, =1.0.4, =0.0.9, =0.0.1, =0.0.3 Source cves: unknown CVE Source advisory: OSV:GHSA-M489-XR35-FJXR...
PT-2021-24441
Name of the Vulnerable Software and Affected Versions: millisecond versions prior to 0.1.2 Description: The issue is related to a regular expression denial of service vulnerability. It occurs when extremely long version strings are parsed. There is no information provided about the estimated numb...
Regular Expression Denial of Service
Overview Versions of millisecond prior to 0.1.2 are affected by a regular expression denial of service vulnerability when extremely long version strings are parsed. Proof of concept var ms = require'millisecond'; var genstr = function len, chr var result = ""; for i=0; i=len; i++ result = result ...
Pcap Replay Utility
Replay a pcap capture file This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Pcap Replay Utility', 'Description' = %q Replay a pcap capture file , 'Author' = 'amaloteaux', 'License' = MSFLICENSE...
