Lucene search
+L

388848 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/08/19 8:33 a.m.16 views

Malicious code in @wizloft/harness-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0315deb3fb6b42e929a55eafaeaedbf1b428ee8873d4ae31f5ec9956f21b554 dist/index.js the package's declared main contains a heavily obfuscated obfuscator.io-style IIFE appended after the legitimate context-service code. ...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/08/19 8:33 a.m.4 views

MAL-2026-14286 Malicious code in @wizloft/harness-context (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b0315deb3fb6b42e929a55eafaeaedbf1b428ee8873d4ae31f5ec9956f21b554 dist/index.js the package's declared main contains a heavily obfuscated obfuscator.io-style IIFE appended after the legitimate context-service code. ...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/08/19 8:17 a.m.6 views

DEBIAN-CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS5.7AI score0.00111EPSS
SaveExploits0References1
NVD
NVD
added 2026/08/19 8:17 a.m.8 views

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS0.00111EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/19 7:44 a.m.5 views

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS5.7AI score0.00111EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/08/19 7:44 a.m.7 views

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS5.7AI score0.00111EPSS
SaveExploits0
Cvelist
Cvelist
added 2026/08/19 7:44 a.m.29 views

CVE-2026-75900 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS0.00111EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/19 7:44 a.m.7 views

EUVD-2026-62363

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS5.7AI score0.00111EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/08/19 7:44 a.m.3 views

CVE-2026-75900 Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS0.00111EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/19 7:44 a.m.26 views

CVE-2026-75900

swtpm's SWTPM_NVRAM_CheckHeader() validates buffer length against sizeof(pointer) instead of sizeof(struct), allowing an undersized buffer to pass and cause a 2-byte heap overread (6 bytes on 32-bit). Impact: daemon termination and heap data leakage to logs. Red Hat reports no mitigation; fixed i...

6.1CVSS5.7AI score0.00111EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/19 7:34 a.m.4 views

CVE-2026-75900

An out-of-bounds read vulnerability was found in swtpm's SWTPMNVRAMCheckHeader function. The entry guard checks the buffer length against sizeofbh, where bh is a pointer, instead of sizeofbh, the actual struct size. This allows an undersized buffer to pass validation, causing a 2-byte heap overre...

6.1CVSS5.2AI score0.00111EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/19 7:27 a.m.3 views

CVE-2026-72352

A flaw was found in the Linux kernel's Human Interface Device HID Berkeley Packet Filter BPF component. An integer overflow, where a calculation exceeds the maximum value an integer type can store, in the hidbpfgetdata function's range check can occur when processing a very large size value. This...

7.8CVSS5.4AI score0.00175EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/08/19 6:44 a.m.16 views

Exploit for CVE-2026-53959

CVE-2026-53959 - 4gaBoards python exploit.py http://localhost...

6.5CVSS5.3AI score0.00321EPSS
SaveExploits1
Hacker One
Hacker One
added 2026/08/19 6:31 a.m.7 views

curl: Domainless COOKIEFILE cookie leaks to unrelated IP-literal hosts

When curl loads a cookie file written as raw HTTP Set-Cookie: header lines and a line has no Domain attribute, the cookie is stored with co-domain == NULL, because a file import has no request-host to scope it to. On the send side, Curlcookiegetlist accepts any cookie in the bucket whose domain i...

5.6AI score
SaveExploits0
NVD
NVD
added 2026/08/19 6:17 a.m.9 views

CVE-2026-49422

The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack had not been switched away, but did not reload its pointer to the stack's per-connection control block. If userspace...

8.4CVSS0.00126EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/19 5:28 a.m.53 views

CVE-2026-49422

The FreeBSD advisory (FreeBSD-SA-26:43.tcp) confirms the bug affects all supported FreeBSD versions and provides specific correction commit hashes for stable/15, releng/15.1, releng/15.0, stable/14, releng/14.4, and releng/14.3 branches, all dated 2026-06-30. Workarounds include not loading tcp_r...

8.4CVSS7.3AI score0.00126EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 5:28 a.m.7 views

EUVD-2026-62244

The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack had not been switched away, but did not reload its pointer to the stack's per-connection control block. If userspace...

8.4CVSS7.3AI score0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/19 5:28 a.m.31 views

CVE-2026-49422 Use-after-free in TCP RACK stack option handler

The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack had not been switched away, but did not reload its pointer to the stack's per-connection control block. If userspace...

0.00126EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/08/19 5:28 a.m.5 views

CVE-2026-49422 Use-after-free in TCP RACK stack option handler

The RACK setsockopt2 handler drops the connection lock in order to copy option data from userspace, then reacquires the lock. After reacquiring, it verifies that the TCP stack had not been switched away, but did not reload its pointer to the stack's per-connection control block. If userspace...

7.3AI score0.00126EPSS
SaveExploits0References1
GithubExploit
GithubExploit
added 2026/08/19 5:20 a.m.18 views

Redis_Pwn

Redis Rogue PWN Enhanced Redis rogue server exploit for CTF...

6.4AI score
SaveExploits0
Rows per page
Query Builder