1329 matches found
bucket-stream
🚨 Bucket Stream is no longer maintained. If you need support or consultation for your red teaming endeavours, drop me an e-mail [email protected] 🚨 Bucket Stream Find interesting Amazon S3 Buckets by watching certificate transparency logs. This tool simply listens to various certificate...
Vedo Suite 1.2.5 Insecure Direct Object Reference
Vedo Suite version 1.2.5 contains an insecure direct object reference vulnerability that allows an authenticated low-privileged user to access other users' private data by changing user-controlled API identifiers...
CVE-2026-109829
undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handle...
EUVD-2026-101943
There are two invocations of qrencode to display a QR code for scanning. These invocations leak the private data $pin / $key via /proc accessible for arbitrary low-privileged users in the system...
CVE-2026-109829: Origin Validation Error
undici is an HTTP client library for Node.js. In versions 7.0.0 through 7.30.0 and 8.0.0 through 8.12.1, when an originless Agent composes the redirect and cache interceptors in that order with a shared cache store, the cache builds its key from the original request URL before the redirect handle...
CVE-2026-101886
Cisco Jabber for Android (com.cisco.im) versions prior to 15.3.1.311364 are vulnerable to a path traversal vulnerability. The flaw exists because the exported crosslaunch.share activity uses an unsanitized display name from a ContentProvider during file path construction. A malicious application ...
CVE-2026-101886: Improper Limitation of a Pathname to a Restricted Directory
Cisco Jabber for Android com.cisco.im before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write attacker-controlled files into Jabber's private data directory by exploiting the exported crosslaunch.share activity and an unsanitized displ...
Astra Linux – Vulnerability in Linux, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: Net: FDDI – Fixed a UAF Use-after-Free issue in fzaprobe. “FP” is netdev private data, and it cannot be used after the freenetdev call. Using “FP” after freenetdev can cause a UAF bug. This issue was fixed by moving the freenetde...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices The probe function is only used for the DP83822 PHY; the private data pointer remains uninitialized for the smaller DP83825/26 models. While all uses of the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Input: ims-pcu – fixed type confusion in CDC union descriptor parsing. The driver currently relies on bMasterInterface0 from the CDC union descriptor without verifying that it matches the interface being probed. This could lead t...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: removed the unused checkbuddypriv function. The commit 2461c7d60f9f “rtlwifi: Update header file” introduced a global list of private data structures. Later, the commit 26634c4b1868 “rtlwifi: Modify existing bits t...
AlmaLinux 9.2 [TuxCare] Security Update: nspr / nspr-devel / nss / nss-devel / nss-pkcs11-devel / etc (ALMALINUX9.2:CLSA-2025:1756961235)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1756961235 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to...
CentOS Linux 7 [TuxCare] Security Update: nss-softokn / nss-softokn-devel / nss-softokn-freebl / etc (CENTOS7:CLSA-2025:1739975489)
The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1739975489 advisory. - NSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack could potentially allow an attacker to recover...
[SECURITY] [DLA 4802-1] python-django security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4802-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb September 29, 2026 https://wiki.debian.org/LTS -...
Debian dla-4802 : python-django-doc - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4802 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4802-1 [email protected]...
OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet
Impact Two locations consume an encrypted handle returned by an untrusted external party and use it without verifying that the party is ACL-authorized on it. VestingWalletConfidential Malicious users can call release with a malicious token. This token could return an alternative handle on...
GHSA-29H2-JR22-FRMH OpenZeppelin Confidential Contracts `VestingWalletConfidential`: a malicious ERC-7984 token is able to extract private data from the vesting wallet
Impact Two locations consume an encrypted handle returned by an untrusted external party and use it without verifying that the party is ACL-authorized on it. VestingWalletConfidential Malicious users can call release with a malicious token. This token could return an alternative handle on...
EUVD-2026-85051
The Product Badge, Label, Countdown Timer for WooCommerce WordPress plugin before 7.5.2 does not check whether a product is published before returning its details to unauthenticated users, allowing them to read the title, description and price of draft, pending and private products...
CVE-2026-89895 media: cobalt: Avoid freeing ALSA private data twice
In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice sndcobaltcardcreate stores cobsc in sc-privatedata and installs sndcobaltcardprivatefree as sc-privatefree. From that point, sndcardfreesc releases cobsc through the ALSA card...
EUVD-2026-80495
In the Linux kernel, the following vulnerability has been resolved: media: cobalt: Avoid freeing ALSA private data twice sndcobaltcardcreate stores cobsc in sc-privatedata and installs sndcobaltcardprivatefree as sc-privatefree. From that point, sndcardfreesc releases cobsc through the ALSA card...