8358 matches found
CVE-2026-89445
CVE-2026-89445 is a Use-After-Free in the Linux kernel 's iommufd selftest component. The TRIGGER_IOPF selftest borrows an attach handle from group->pasid_array without synchronizing against PASID detach, allowing a concurrent iommu_report_device_fault() to dereference a freed struct iommufd_a...
CVE-2026-89445 iommufd: Fix UAF in selftest IOPF reporting
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGERIOPF borrows an attach handle from group-pasidarray without synchronizing against PASID detach, then a concurrent iommureportdevicefault can dereference that...
CVE-2026-86781
creationtimestamp| type| source ---|---|--- 2026-09-11 07:30:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mva2bi7jx72x 2026-09-11 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117251232554267501 2026-09-11 08:10:57+00:00| seen|...
CVE-2026-81800
creationtimestamp| type| source ---|---|--- 2026-09-10 16:09:03+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mv6grufjks2j 2026-09-10 16:10:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mv6gtsiysc2t...
CVE-2026-17038
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038 Use of Hard-coded Credentials in drEryk Gabinet
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038 Use of Hard-coded Credentials in drEryk Gabinet
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
EUVD-2026-75403
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
CVE-2026-17038
DrEryk Gabinet versions prior to 11.5.0 embed hard-coded API credentials within its ticket reporting component. An attacker who discovers these credentials can authenticate directly to the ticket system API, bypassing the application's normal access controls and performing privileged operations s...
Copyright scammers get Instagram accounts suspended and demand payment
Scammers are abusing Meta's copyright-reporting system to suspend people's Instagram accounts and then hold them for ransom, according to the BBC. Criminals file fake copyright complaints with Instagram, claiming that an account is using material it doesn't own. Repeated complaints can trigger a...
Malicious Package
Overview @auction-fe/reporting-system is a malicious package. This package contains malicious code. Although this package may be attempting to impersonate a legitimate organization, it has no connection to that organization or its authors. Remediation Avoid using all malicious instances of the...
CVE-2026-17038: Use of Hard-coded Credentials
DrEryk Gabinet before 11.5.0 uses hard-coded API credentials in its ticket reporting component. These credentials can be used to authenticate directly to the ticket system API. This allows an attacker to perform privileged operations beyond what is offered by the application, including reading an...
Malicious code in @auction-fe/reporting-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2026-16108 Malicious code in @auction-fe/reporting-system (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a41fe4ef01818c699bc5c1953702b37cb566a58b0b4769a7ae532b05699b130 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2026-87911
creationtimestamp| type| source ---|---|--- 2026-09-09 21:01:20+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mv4gnlpu7723 2026-09-09 21:05:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fesvv2zo64rnp 2026-09-09 23:10:05+00:00| seen|...
[SECURITY] Fedora 44 Update: complyctl-1.0.0-1.fc44
complyctl fetches Gemara policies from OCI registries, resolves dependency graphs, dispatches scans to providers via gRPC, and produces compliance reports EvaluationLog, OSCAL, Markdown, SARIF. Providers are distributed separately via the complytime-providers package...
CVE-2026-83996
Heap-based buffer overflow in Windows Error Reporting allows an authorized attacker to elevate privileges locally...
CVE-2026-69896
Use after free in Windows Error Reporting allows an authorized attacker to elevate privileges locally...