7131 matches found
CVE-2026-3268: Improper Access Control
A vulnerability was detected in psi-probe PSI Probe up to 5.3.0. The affected element is an unknown function of the file psi-probe-core/src/main/java/psiprobe/controllers/sessions/RemoveSessAttributeController.java of the component Session Attribute Handler. Performing a manipulation results in...
PT-2026-22236
Name of the Vulnerable Software and Affected Versions psi-probe PSI Probe versions up to 5.3.0 Description A flaw exists in the Session Handler component of psi-probe PSI Probe. Specifically, the handleRequestInternal function within the file...
PT-2026-22227
Name of the Vulnerable Software and Affected Versions PSI Probe versions up to 5.3.0 Description A flaw exists in PSI Probe that involves improper access controls. This issue is related to a function within the...
Linux kernel serial port module Heap Buffer Overflow DoS
The vulnerability of the jsmprobeone function in the drivers/tty/serial/jsm/jsmdriver.c file of the console TTY driver in the Linux kernel is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a system failure...
CVE-2026-24005
Kruise provides automated management of large-scale applications on Kubernetes. Prior to versions 1.8.3 and 1.7.5, PodProbeMarker allows defining custom probes with TCPSocket or HTTPGet handlers. The webhook validation does not restrict the Host field in these probe configurations. Since...
Server-side Request Forgery (SSRF)
Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the PodProbeMarker component. An attacker can access internal network resources, perform port scanning, and retrieve response feedback by specifying arbitrary values in the host field of probe...
GHSA-JMHP-5558-QXH5 OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
Summary An OS command injection vulnerability in NetworkPathMonitor.performTraceroute allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell metacharacters into a monitor's destination field. Details The vulnerability exists in...
CVE-2026-27728
OneUptime prior to v10.0.7 contains an OS command injection vulnerability in NetworkPathMonitor.performTraceroute() that allows an authenticated project user to inject shell metacharacters into a monitor destination, enabling arbitrary commands on the Probe server. Affected version: before 10.0.7...
CVE-2026-27728
OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in NetworkPathMonitor.performTraceroute allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell...
CVE-2026-27728 OneUptime: OS Command Injection in Probe NetworkPathMonitor via unsanitized destination in traceroute exec()
OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in NetworkPathMonitor.performTraceroute allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell...
OneUptime: Operating System Command Injection Vulnerability
OneUptime is a comprehensive solution developed by OneUptime OpenSource. It is used to monitor and manage your online services. Versions of OneUptime prior to 10.0.7 contained an operating system command injection vulnerability. This vulnerability originated from the...
CVE-2026-27728: Improper Neutralization of Special Elements used in an OS Command
OneUptime is a solution for monitoring and managing online services. Prior to version 10.0.7, an OS command injection vulnerability in NetworkPathMonitor.performTraceroute allows any authenticated project user to execute arbitrary operating system commands on the Probe server by injecting shell...
drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c
Vulnerability of the armsmmudeviceprobe function in the drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c file – The Linux kernel’s IOMMU support driver is vulnerable due to a NULL pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a system crash...
Linux fs/ext4/namei.c Heap Buffer Overflow DoS
The vulnerability of the dxprobe function in the fs/ext4/namei.c module of the Linux file system support module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a hacker to cause service failures...
sound/soc/intel/boards/sof_sdw.c Heap Buffer Overflow DoS
The vulnerability of the mcprobe function in the sound/soc/intel/boards/sofsdw.c file, which is part of the Linux operating system’s audio support for SoC cores, involves exposing confidential information. Exploiting this vulnerability could allow an attacker to cause a service failure...
OneUptime:: node:vm sandbox escape in probe allows any project member to achieve RCE
Summary OneUptime lets project members write custom JavaScript that runs inside monitors. The problem is it executes that code using Node.js's built-in vm module, which Node.js itself documents as "not a security mechanism — do not use it to run untrusted code." The classic one-liner escape gives...
PT-2026-39091
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the usb: yurex probe process. The bbu member of the descriptor is not set to the uninitialized value before the submission of the URB USB Request Block whose...
PT-2026-72815
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the dax/kmem component where the dev dax kmem probe function may partially succeed by mapping at least one range, but fail on subsequent ranges during request mem regi...
PT-2026-37496
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The pegasus probe function fills USB Request Blocks URBs with hardcoded endpoint pipes without verifying the endpoint descriptors. Specifically, it uses usb rcvbulkpipedev, 1 for RX data...
Linux SCSI Device Driver Heap Buffer Overflow DoS
The vulnerability of the storvscprobe function in the drivers/scsi/storvscdrv.c file of the Linux SCSI device driver module is related to the occurrence of mutual locking. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...