mini-shai-hulud-detector

Mini Shai-Hulud Detector One-command scanner for the Mini Shai-Hulud npm supply-chain attack CVE-2026-45321, CVSS 9.6. Critical: detect before rotating tokens The worm installs a persistence daemon gh-token-monitor that runs rm -rf if it detects credential revocation. Do not rotate your GitHub PA...

CVE-2009-1330

CVE-2009-1330 Exploit for buffer overflow in Easy RM to MP3 Converter 2.7.3.700 CVE-2009-1330 Based on: pwntools msfvenom / reversetcp payload ropper x64dbg Easy RM to MP3 Converter 2.7.3.700 Vulnerable app available at https://www.exploit-db.com/exploits/10374...

SUSE CVE-2026-98875

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

CVE-2026-98875

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

EUVD-2026-108721

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

CVE-2026-98875 drm/nouveau/gsp: add SEC2 to GA100 chip table

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

CVE-2026-98875

The Linux kernel contains a vulnerability in the drm/nouveau/gsp component involving the GA100 chip table . During the tu102_gsp_oneinit() function, the booter constructor requires device->sec2 to access the SEC2 falcon for booter-load and booter-unload firmware. Due to a missing .sec2 entry, ...

CVE-2026-98875 drm/nouveau/gsp: add SEC2 to GA100 chip table

In the Linux kernel, the following vulnerability has been resolved: drm/nouveau/gsp: add SEC2 to GA100 chip table The booter-load and booter-unload firmware run on the SEC2 falcon. During tu102gsponeinit, the booter constructor needs device-sec2 to access the SEC2 falcon. Without the .sec2 entry,...

CVE-2026-103060

The rebar3 build tool (versions 3.7.0-rc1 to 3.27.2 ) contains a Path Traversal vulnerability (CWE-22) caused by unvalidated dependency app names. Because the rebar_packages:parse_deps/1 function fails to validate the app field from the Hex registry, a malicious publisher can provide a path such ...

CVE-2026-103060 Path traversal in rebar3 via unvalidated dependency app names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's build directory and extract package files into it when a developer fetches dependencies. A package release's...

PT-2026-110631

Name of the Vulnerable Software and Affected Versions erlang rebar3 versions 3.7.0-rc1 through 3.27.1 Description A path traversal issue exists where a malicious package publisher can delete a directory outside the project's build directory and extract package files into it when a developer fetch...

EUVD-2026-83800

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093 DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093

DLR-RM stable-baselines3 up to 2.9.0 is affected by unsafe pickle deserialization in the PPO.load, load_replay_buffer, and VecNormalize.load functions of save_util.py, enabling remote attacks with no privileges required (user interaction required). In v2.9.0 the PyTorch tensor load path was harde...

CVE-2026-94093 DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

CVE-2026-94093: Deserialization of Untrusted Data

A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0. This affects the function PPO.load/loadreplaybuffer/VecNormalize.load of the file saveutil.py. Such manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclos...

OESA-2026-3524 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...

OESA-2026-3523 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...

CVE-2026-76217

A flaw was found in GitPython where it fails to properly validate options provided to its git rm and git checkout commands. A remote attacker with low privileges could exploit this by supplying crafted parameters, such as --pathspec-from-file and --pathspec-file-nul. This vulnerability allows for...