161528 matches found
K000163628: Apache Camel vulnerability CVE-2026-40473
Security Advisory Description The camel-mina component's MinaConverter.toObjectInputIoBuffer type converter wraps an IoBuffer in a java.io.ObjectInputStream without applying any ObjectInputFilter or class-loading restrictions. When a Camel route uses camel-mina as a TCP or UDP consumer and reques...
K000163627: Linux kernel vulnerabilities CVE-2026-43276, CVE-2026-43329, CVE-2026-45898 and CVE-2026-46090
Security Advisory Description CVE-2026-43276 In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix double destroyworkqueue on service rescan PCI path While testing corner cases in the driver, a use-after-free crash was found on the service rescan PCI path. When...
enterpriseattack
enterpriseattack - MITRE's Enterprise ATT&CKĀ® A lightweight Python module to interact with the MITRE ATT&CK Enterprise dataset. Built to be used in production applications due to it's speed and minimal depedancies. Read the docs for more info. MITRE ATT&CKĀ® MITRE ATT&CKĀ® is a globally-accessible...
Security Bulletin: A heap buffer overflow vulnerability in rsyslog impacts AIX.
Summary Vulnerabilities in Rsyslog could cause heap buffer overflow CVE-2026-78002. Rsyslog is used by AIX as logging daemon. Vulnerability Details CVEID:CVE-2026-78002 DESCRIPTION: A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the...
K000163626: Multiple Linux kernel vulnerabilities
Security Advisory Description CVE-2026-46242 In the Linux kernel, the following vulnerability has been resolved: eventpoll: fix epremove struct eventpoll / struct file UAF epremove via epremovefile cleared file-fep under file-flock but then kept using @file inside the critical section isfileepoll...
K000163625: Arm CPU vulnerability CVE-2025-10263
Security Advisory Description Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 & X1C, Cortex-A710, Cortex-A78, A78AE & A78C, Cortex-A77, Cortex-A76 & A76A may allow writes to resources owned b...
API-Security-Checklist
ē¹äøē | ē®äøē | Ų§ŁŲ¹Ų±ŲØŁŲ© | AzÉrbaycan | ŠŃŠ»Š³Š°ŃŃŠŗŠø | ą¦¬ą¦¾ą¦ą¦²ą¦¾ | CatalĆ | ÄeÅ”tina | Deutsch | ĪĪ»Ī»Ī·Ī½Ī¹ĪŗĪ¬ | EspaƱol | ŁŲ§Ų±Ų³Ū | FranƧais | ą¤¹ą¤æą¤ą¤¦ą„ | Indonesia | Italiano | ę„ę¬čŖ | ķźµģ“ | ąŗąŗ²ąŗŖąŗ²ąŗ„ąŗ²ąŗ§ | ŠŠ°ŠŗŠµŠ“Š¾Š½ŃŠŗŠø | ą“®ą“²ą“Æą“¾ą“³ą“ | ŠŠ¾Š½Š³Š¾Š» | Nederlands | Polski | PortuguĆŖs Brasil | Š ŃŃŃŠŗŠøŠ¹ | ą¹ąøąø¢ | TĆ¼rkƧe | Š£ŠŗŃŠ°ŃŠ½ŃŃŠŗŠ° | Tiįŗæng Viį»t...
K000163624: Python vulnerability CVE-2026-8643
Security Advisory Description pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory. CVE-2026-8643 Impact There is no...
cve-2026-19445-sni-uaf
abraxaslabs.tech Ā· github.com/abraxas Ā· @abraxasnull Ā· [email protected] Ā· cve-2026-19445-sni-uaf cve-2026-19445-sni-uaf CPython ssl - Python Software Foundation A TLS server that mints an SSLContext per connection, sets snicallback, and assigns sslobj.context = otherctx can drop the last...
K000163623: Multiple Linux kernel vulnerabilities
Security Advisory Description CVE-2026-46113 In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Fix shadow paging use-after-free due to unexpected GFN The shadow MMU computes GFNs for direct shadow pages using sp-gfn plus the SPTE index. This assumption breaks for shado...
Exploit for CVE-2022-21812
Intel HAXM Kernel Driver: Reverse Engineering & CVE-2022-21812...
Exploit for CVE-2022-21812
Intel HAXM Kernel Driver: Reverse Engineering & CVE-2022-21812...
QuantumLock
QuantumLock Specification Unbreakable, Quantum-Ready, Forever. HTML Mirror: https://roxanneardary.com/quantumlock-specification/ Vision QuantumLock is an open-source protocol specification designed to make Bitcoin more resilient against the development of quantum computing and other emerging...
sunsetscan
SunsetScan Network security auditing for humans ā powered by nmap, built for everyone. Website: sunsetscan.com SunsetScan is a local-network security auditing tool for home network owners and IT staff who want the depth of nmap without learning nmap syntax. Point it at your network and it finds...
CVE-2026-67182-HTTP-Request-Smuggling-Enables-Front-End-Access-Control-Bypass-rouille-
Security Advisory: HTTP Request Smuggling Enables Front-End Access Control Bypass rouille Assigned CVE ID: CVE-2026-67182 Summary rouille::proxy::proxy and rouille::proxy::fullproxy copy client-supplied request header values into the upstream connection without checking them for control character...
K000163618: Linux kernel vulnerability CVE-2025-68366
Security Advisory Description In the Linux kernel, the following vulnerability has been resolved: nbd: defer config unlock in nbdgenlconnect There is one use-after-free warning when running NBDCMDCONNECT and NBDCLEARSOCK: nbdgenlconnect nbdallocandinitconfig // configrefs=1 nbdstartdevice //...
K000163617: OpenSSL vulnerabilities CVE-2026-63072, CVE-2026-63073 and CVE-2026-63074
Security Advisory Description CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap writ...
K000163622: Python vulnerability CVE-2026-7210
Security Advisory Description xml.parsers.expat and xml.etree.ElementTree use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerability requires both updating libexpat to 2.8.0 or later and...
resym
ReSym Artifact This repository provides artifacts for the paper "ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binaries" CCS 2024. š ACM SIGSAC Distinguished Paper Award Winner Note : We are actively maintaining/updating our artifacts. Please make sure you ar...
K000163620: Linux Kernel vulnerabilities CVE-2026-23112 and CVE-2026-43493
Security Advisory Description CVE-2026-23112 In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmettcpbuildpduiovec nvmettcpbuildpduiovec could walk past cmd-req.sg when a PDU length or offset exceeds sgcnt and then use bogus sg-length/offset...