CVE-2026-56226

Capgo (Cap-go/capgo) before 12.128.2 exposes the Supabase PostgREST RPC function public.get_orgs_v6(userid uuid), which is SECURITY DEFINER and granted to the anon role, allowing unauthenticated access. The function accepts a caller-supplied user UUID without verifying it matches the authenticate...

SurrealDB has unauthenticated remote DoS via malformed RPC `use` call

A single unauthenticated WebSocket message to /rpc crashed the SurrealDB server. Sending use db: "x" without first selecting a namespace hit .expect"namespace should be set" in the use handler; because surrealdb-core is built with panic = 'abort', the panic terminated the process. use is callable...

CVE-2026-50741

CVE-2026-50741 concerns Revive Adserver and describes bypassing the fix for CVE-2026-34916. The connected documents indicate that the bypass can be achieved by: (1) sending a disallowed but otherwise valid plugin identifier as the plugin type, and (2) calling the XML-RPC API method ox.setChannelT...

SUSE CVE-2026-48860

Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl inettlsdist module allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inettlsdist:checkip/1 function, which enforces a LAN allowlist for Erlang distribution over TLS, calls inet:sockname/1 instead...

CVE-2026-7480

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism. Refer to the 'Security Update for ASUS System Control...

EUVD-2013-4190

Malware in sbrugna...

EUVD-2012-0030

Malware in sbrugna...

EUVD-2018-6748

Malware in sbrugna...

EUVD-2018-6750

Malware in sbrugna...

EUVD-1999-0492

Malware in sbrugna...

EUVD-2012-4358

Malware in sbrugna...

EUVD-2018-13139

Malware in sbrugna...

EUVD-2019-13547

Malware in sbrugna...

EUVD-2022-1537

Malicious code in bioql PyPI...

EUVD-2024-51845

Malicious code in bioql PyPI...

CVE-2022-50410

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

CVE-2022-50410 NFSD: Protect against send buffer overflow in NFSv2 READ

In the Linux kernel, the following vulnerability has been resolved: NFSD: Protect against send buffer overflow in NFSv2 READ Since before the git era, NFSD has conserved the number of pages held by each nfsd thread by combining the RPC receive and send buffers into a single array of pages. This...

CVE-2022-50345

CVE-2022-50345 refers to a Linux kernel NFSD issue affecting NFSv3 READ, where the send buffer overflow risk stems from how NFSD tallies RPC pages for request/response. Multiple vendor advisories (e.g., ALAS2KERNEL-5.15-2025-090 and ALAS2KERNEL-5.10-2025-106) indicate the vulnerability has been r...

CVE-2022-50072

CVE-2022-50072 is a Linux kernel use-after-free vulnerability in NFSv4/pnfs related to open operations. The issue occurs when an open RPC call is cancelled: the kernel must not free the open slot or layoutget arguments still in use by the hung RPC. The entry states this was resolved by a fix in t...

CVE-2022-50072 NFSv4/pnfs: Fix a use-after-free bug in open

In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs: Fix a use-after-free bug in open If someone cancels the open RPC call, then we must not try to free either the open slot or the layoutget operation arguments, since they are likely still in use by the hung RPC call...