84 matches found
CVE-2026-118765
Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...
CVE-2026-118765 Botan: AutoSeeded_RNG can become reinitialized from predictable data after clearing state
Botan is a C++ cryptography library. From 3.7.0 until 3.13.0, an application that calls AutoSeededRNG::clear and then calls randomize with an empty output buffer while the generator is unseeded can cause AutoSeededRNG to mark itself seeded without consulting the configured entropy source. On buil...
CLSA-2025-1738663576 kernel: Fix of 12 CVEs
ELF: fix kernel.randomizevaspace double read CVE-2024-46826 - smb: client: fix UAF in async decryption CVE-2024-50047 - SMB3: Resolve data corruption of TCP server info fields CVE-2024-50047 - smb3: add defines for new crypto algorithms CVE-2024-50047 - net: do not delay dstentriesadd in...
PT-2026-116694
In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schib config and schib fields as dma64 t to enable automatic detection of incorrect assignments. Also...
Tesseract Optical Character Recognition CopyTimeStepGeneral Randomize Buffer Overflow DoS
The vulnerability of the NetworkIO::CopyTimeStepGeneral and NetworkIO::Randomize functions in the Tesseract optical character recognition system is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity,...
Salt preflight script could be attacker controlled
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...
PYSEC-2026-1892 Salt preflight script could be attacker controlled
The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-005133)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005133 advisory. In the Linux kernel, the following vulnerability has been resolved: ELF: fix kernel.randomizevaspace double read ELF loader uses randomizevaspace twice. It is sysctl...
MAL-2025-185524 Malicious code in archaeogenetics-csrf-aquarius-perturbation (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3bf298157c040760bce94b452e888389305beacf18b29f6f82b92ab32890e45 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-187780 Malicious code in library-kronos-start-ceres (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 809337d37e779bd9ce52e2cddd68c7fa1c0fb249e9ba2dc8d1c9655e1e3eea5f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in namei-mla-anubuiau (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 66c1e5a3e9045352e0d1968537865e6c9d072a268c6948a60cd557ec26e8c506 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-165657 Malicious code in saku-aiu-unianusu (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b44133ac47e43aa19a4f25c32e0d8db273175f1fdc1b10e09d947c3347d553dd This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-152131 Malicious code in akabi-aliga-aihabamava (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5fbcc45882b5f7f8f3fd9cd17dfb1cdff3f6173894f500749ab4118a6fb8428c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in masako-males-nurs (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b61c7a02e88985dccb422b986925375aff9a99cb4d55da57ec5331042c0d86ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-115457 Malicious code in lina-lutis100-miaww (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65669d11830a6ed74a8af09146b94ee29a2bd8d96a07a9fe1aa008da4204c1e3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in cindy-tomat60-ruro (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector aa4252f667d75008694e79c70badf571ad9f85e7b7259d3b539003e66a89c026 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in gita-getas70-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 328be0c27ed8e1aa9f091c61a23c3abb59555b602a8efd059551c94c44d732af This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rudi-bubur42-sukiwir (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a3fea44a83b4f4e803afaf4001c39e45ed12bc3eb760fc4692c5187e28b7ba66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
ShuffleV: A Microarchitectural Defense Strategy against Electromagnetic Side-Channel Attacks in Microprocessors
The run-time electromagnetic EM emanation of microprocessors presents a side-channel that leaks the confidentiality of the applications running on them. Many recent works have demonstrated successful attacks leveraging such side-channels to extract the confidentiality of diverse applications, suc...
