23898 matches found
CVE-2026-68329
CVE-2026-68329 affects the Linux kernel’s iommu/amd path. A race in iommu_completion_wait() can cause it to return before all previously queued commands complete, enabling a use-after-free window where stale page-table translations may be used. The issue stems from need_sync being read locklessly...
CVE-2026-68230
CVE-2026-68230 affects the Linux kernel media: amlogic-c3 driver. The vulnerability stems from improper validation of AWB/AE configuration, failing to ensure zones_num does not exceed allocated memory for zone weights, leading to potential invalid memory access and buffer overflow. Multiple sourc...
CVE-2026-18401
A flaw was found in jackson-core. The non-blocking asynchronous JSON parser does not properly enforce the maximum number length constraint. A remote attacker can exploit this by submitting a specially crafted JSON document containing an arbitrarily long number to an application using the...
CVE-2026-66486
creationtimestamp| type| source ---|---|--- 2026-08-10 10:45:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/edsgdcj66b3ei 2026-08-10 12:15:14+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-66484 2026-08-15 00:10:28+00:00| seen|...
RHSA-2026:52649 Red Hat Security Advisory: kernel security update
Bulletin has no description...
vBulletin - install/upgrade.php Exposure Detection (CVE-2013-6129)
Detects CVE-2013-6129 style install exposure by finding reachable /install/upgrade.php with Customer Number form. !/usr/bin/env python3 -- coding: utf-8 -- """vBulletin install/upgrade.php authentication bypass exposure CVE-2013-6129.""" from kittysploit import from lib.protocols.http.httpclient...
CVE-2026-65502
creationtimestamp| type| source ---|---|--- 2026-08-10 03:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msp557n4lz2y 2026-08-10 23:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msra6zpguh2o...
ECHO-A10B-DD74-A1AF
Bulletin has no description...
MINI-8GWW-WRPC-GWV5
Bulletin has no description...
CVE-2026-48097
creationtimestamp| type| source ---|---|--- 2026-08-08 07:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mskirptsnh23...
CVE-2026-71851
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random, instead of a cryptographically secure source...
ECHO-C67D-4DCA-CE2D
Bulletin has no description...
MINI-W9X6-MG2P-9R8C
Bulletin has no description...
MINI-FFCM-QX23-9736
Bulletin has no description...
Security Bulletin: Jackson-Core Async JSON Parser Bypasses Number Length Constraint Leading to Denial of Service
Summary Jackson-core's non-blocking async JSON parser fails to enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters, unlike the synchronous parser which correctly applies the limit. An attacker can submit JSON containing arbitrarily long numbers through...
CVE-2026-71438
creationtimestamp| type| source ---|---|--- 2026-08-06 20:32:06+00:00| seen| https://gist.github.com/alon710/1523a448808a9bd39531599fad70a2e8...
CVE-2026-65547
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate to CVE-2026-3985...
CVE-2026-18427
creationtimestamp| type| source ---|---|--- 2026-08-06 14:59:17+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3msgckuh2w226 2026-08-06 20:00:46+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msgtfyoa4h2n...
