1851 matches found
Fedora 44 : libseccomp (2026-752186819e)
The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-752186819e advisory. libseccomp 2.6.1 packaging changes - Enable Python bindings on Fedora 44+ upstream changes - July 1, 2026 - Update the syscall table for Linux v7.1.0-rc4 - F...
BLE Notify Capture
Subscribes to GATT notifications/indications and captures values for a timed window !/usr/bin/env python3 -- coding: utf-8 -- """BLE gather — subscribe to notifications/indications and capture traffic.""" from kittysploit import from lib.protocols.ble.blesessionmixin import BleSessionMixin from...
CVE-2026-63305 AVideo through 29.0 OS Command Injection via ffmpeg.json.php
AVideo through 29.0 contains an OS command injection vulnerability in the ffmpeg.json.php endpoint where notifyCode and callback parameters are concatenated into a shell command without escaping. Attackers who can craft a valid encrypted payload can inject arbitrary shell metacharacters into thes...
USN-8536-1: MariaDB vulnerabilities
It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup method. An attacker could possibly use this issue to execute arbitrary shell commands on the donor node. CVE-2026-44168 It was discovered that Maria...
USN-8536-1 mariadb vulnerabilities
It was discovered that MariaDB did not properly validate parameters supplied by a joiner node during a State Snapshot Transfer using the mariabackup method. An attacker could possibly use this issue to execute arbitrary shell commands on the donor node. CVE-2026-44168 It was discovered that Maria...
asphalt-mailer (>=3.0.0, <=3.0.4), async-notify (>=0.6.1, <=0.7.0) +24 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.7)
aiosmtplib PYPI version 1.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - asphalt-mailer =3.0.0, =0.6.1, =19.7.0, =0.4.0.4, =0.0.1, =0.9.27, =0.0.1, =2.3.0, =2.3.9 - own-comments 0.1.0a4 and more Source cves:...
async-notify (>=0.5.17, <=0.6.3), async-sender (1.4.4) +8 more potentially affected by CVE-2026-53533 via aiosmtplib (1.1.6)
aiosmtplib PYPI version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.5.17, =0.1.3, =0.2.3, =1.0.4, =2.0.11, =0.9.13.1, =0.8.4, =0.1.0a0, =0.1.6a0 Source cves: CVE-2026-53533 Source advisory:...
async-notify (>=0.8.0, <=0.8.11), navigator-api (>=2.3.10, <=2.3.17) potentially affected by CVE-2026-53533 via aiosmtplib (2.0.0)
aiosmtplib PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =0.8.0, =2.3.10, =2.3.17 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...
async-notify (>=1.0.0, <=1.2.4), async-sender (2.0.0) +2 more potentially affected by CVE-2026-53533 via aiosmtplib (2.0.1)
aiosmtplib PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - async-notify =1.0.0, =0.8.2, =0.1.0, =0.1.6 Source cves: CVE-2026-53533 Source advisory: OSV:PYSEC-2026-2338...
Malicious code in notify-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25536516e16cffdc7ad2891886d7dcf32ad325b9ba79c2359026809bcfbf417f Package published as notify-utilities masquerades as the pino logger package.json description, keywords, and index.d.ts are copied from pino; the...
MAL-2026-10158 Malicious code in notify-utilities (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 25536516e16cffdc7ad2891886d7dcf32ad325b9ba79c2359026809bcfbf417f Package published as notify-utilities masquerades as the pino logger package.json description, keywords, and index.d.ts are copied from pino; the...
Malicious code in notify-logs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fec337f1c1858ad605f875ea51feb09f84fbd2eb702c7bc0462dbb427b3eff05 [email protected] presents itself as the pino logger export name pino, README and type definitions mimic pino, npm version badge points at the...
Malicious code in notify-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbb2ac45124e3844e29f3efd70ca26f0089ec4eaad718bcbdaf3035ec9b34b The package impersonates the pino logger API exports module.exports.pino = middleware, ships pino-style files such as lib/proto.js, lib/multistream.j...
MAL-2026-10157 Malicious code in notify-theme (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d9cbb2ac45124e3844e29f3efd70ca26f0089ec4eaad718bcbdaf3035ec9b34b The package impersonates the pino logger API exports module.exports.pino = middleware, ships pino-style files such as lib/proto.js, lib/multistream.j...
SUSE CVE-2026-15172
FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...
CVE-2026-15172
A flaw was found in Wireshark. A local user could exploit this vulnerability by processing a specially crafted FMP/NOTIFY protocol packet. This could lead to a denial of service DoS due to a crash in the protocol dissector, making the application unavailable. Mitigation To mitigate this issue,...
CVE-2026-15172
FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...
AZL-92135 CVE-2026-15172 affecting package wireshark 4.4.7-2
FMP/NOTIFY protocol dissector crash in Wireshark 4.6.0 to 4.6.6 and 4.4.0 to 4.4.16 allows denial of service...
