CVE-2026-59252

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer feepayer: true, the MPP.Methods.Tempo payment meth...

CVE-2026-59252 Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer feepayer: true, the MPP.Methods.Tempo payment meth...

EEF-CVE-2026-59252 Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

Summary Improper Validation of Specified Quantity in Input in ZenHive mpp allows an unauthenticated remote client to drain the fee-payer wallet, resulting in denial of service for legitimate clients. When the mpp Elixir library is configured as fee payer fee\payer: true, the MPP.Methods.Tempo...

Astra Linux – Vulnerability in open-vm-tools

open-vm-tools contains a file descriptor hijacking vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor, allowing them to simulate user inputs...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-005506)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-005506 advisory. In the Linux kernel, the following vulnerability has been resolved: arm64: probes: Remove broken LDR literal uprobe support The simulateldrliteral and...

CloudCharge 访问控制错误漏洞

CloudCharge is a website for electric vehicle charging management developed by the Swedish company CloudCharge. CloudCharge has a security vulnerability related to access control. This vulnerability stems from the lack of proper authentication mechanisms at WebSocket endpoints, which could allow...

A CISO’s Guide to Threat Management Platforms

Attackers don’t see your organization as a list of CVEs. They see a web of interconnected assets, looking for a single weak link that will give them a path to your most valuable data. A traditional vulnerability scanner might miss these dangerous connections, but a threat management platform is...

Exploit for Deserialization of Untrusted Data in Facebook React

$$\ $$\ $$$$$$$\ $$\ $$\ $$$$$$$$\ $$\ $...

EUVD-2025-178092

Malicious code in link-cron-simulate-assert-log npm...

EUVD-2025-176944

Malicious code in psi-sudo-key-simulate-double npm...

EUVD-2025-179319

Malicious code in deserialize-double-simulate-interpret-tau npm...

EUVD-2025-178336

Malicious code in iota-simulate-optimize-tree-bundle npm...

EUVD-2025-177407

Malicious code in orchestrate-web-simulate-float-abstract npm...

EUVD-2025-178379

Malicious code in integer-pipe-beta-orchestrate-simulate npm...

EUVD-2025-178229

Malicious code in kappa-awk-deploy-simulate-encrypt npm...

EUVD-2025-175953

Malicious code in thread-simulate-meta-small-cat npm...

EUVD-2025-177037

Malicious code in process-simulate-parse-integer-wind npm...

EUVD-2025-179216

Malicious code in earth-small-scale-simulate-static npm...

EUVD-2025-178414

Malicious code in info-byte-simulate-cat-sudo npm...

EUVD-2025-176388

Malicious code in sigma-compile-simulate-integer-bash npm...