136599 matches found
MAL-2026-11150 Malicious code in streak-daily-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8664341251bd6864f5aaf9692c5b7bd0945125853bc304c91709aaa335be38f1 On import of index.mjs, setImmediate invokes a syncWorkspace routine whose network destination and paths are reconstructed at runtime from hex-encode...
CVE-2026-4648
Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...
CVE-2026-4648 Insufficient Encryption Level in CasfID Servicios Tecnológicos NFC Wristbands
Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...
CVE-2026-4648 Insufficient Encryption Level in CasfID Servicios Tecnológicos NFC Wristbands
Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...
CVE-2026-4648
Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...
CVE-2026-4648
CVE-2026-4648 concerns CasfID Servicios Tecnológicos S.L.U. NFC wristbands used at Resurrection Fest 2025, which rely on MIFARE Classic (FM11RF08S). The underlying issue is an insecure cryptographic algorithm in the authentication process, enabling an attacker to retrieve access keys via Backdoor...
EUVD-2026-49765
Use of an insecure cryptographic algorithm in the cashless payment system using NFC wristbands from CasfID Servicios Tecnológicos S.L.U. version used at Resurrection Fest 2025, which employs cards based on MIFARE Classic technology FM11RF08S. The cryptographic weakness of the authentication...
Exploit for CVE-2026-64600
🚨 CVE-2026-64600 — RefluxFS Linux Kernel Local Privil...
K000162482: Linux kernel vulnerability CVE-2026-22984
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds reads in handleauthdone Perform an explicit bounds check on payloadlen to avoid a possible out-of-bounds access in the callout. idryomov: changelog...
Root-My-Device-Payloads
Root My Device Payloads A fork of BuSung-dev/Root-My-Galaxy-...
Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j
Summary IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody TestConductor risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2025-68161 DESCRIPTION: The Socke...
Microsoft Says New Cybersecurity AI Model Helps MDASH Score 95.95% at Half the Cost
Microsoft has launched its first cybersecurity-specific model inside MDASH , its multi-model vulnerability identification and remediation harness. The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims the configuration costs 50% less than its curre...
Multiple vulnerabilities impacts AIX due to cURL libcurl (CVE-2026-10536 CVE-2026-11856 CVE-2026-8286 CVE-2026-8458 CVE-2026-8924 CVE-2026-8927 CVE-2026-8932 CVE-2026-9547)
IBM SECURITY ADVISORY First Issued: Tue Jul 28 05:27:04 CDT 2026 The most recent version of this document is available here: https://aix.software.ibm.com/aix/efixes/security/curladvisory11.asc Security Bulletin: Multiple vulnerabilities impacts AIX due to cURL libcurl CVE-2026-10536,...
K000162477: Linux kernel vulnerability CVE-2026-52922
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: batman-adv: dat: handle forward allocation error batadvdatforwarddata calls pskbcopyforclone to duplicate an skb for each DHT candidate, but does not check the return value before passing it to...
K000162460: Multiple Spring framework vulnerabilities
Security Advisory Description CVE-2026-22754 Vulnerability in Spring Spring Security. If an application uses to define the servlet path for computing a path matcher, then the servlet path is not included and the related authorization rules are not exercised. This can lead to an authorization...
CVE-2026-51271
DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2026-51271
In the provided documents, CVE-2026-51271 is linked to the schreibfaul1 ESP32-audioI2S 3.4.5 component. The reported vulnerability is a heap-based buffer overflow in the WAV header parsing function read_WAV_Header(). The function reads untrusted chunk size and bytes-to-skip values directly from m...
CVE-2026-51261
The CVE-2026-51261 entry refers to a vulnerability in schreibfaul1 ESP32-audioI2S 3.4.5 where missing mutex synchronization in AudioBuffer::freeSpace() creates a race condition between concurrent tasks. The function computes available buffer space without protecting shared read/write pointers, re...