318701 matches found
PT-2026-97624
Name of the Vulnerable Software and Affected Versions pmTicket Project-Management-Software versions up to 078fa56a782490c5059a0814f84df27984f4d7e2 Description A remote SQL injection is possible due to improper handling of the conn settings argument within the setSync function of the '/ajax/add...
MimicSat: A Reconfigurable Cyber-Physical Testbed for Small Satellite Systems and Cybersecurity Research
MimicSat provides a common experimental environment for examining how changes in satellite subsystem behavior propagate to mission outcomes across software-based and hardware-based execution. Its design is motivated by controlled spacecraft cybersecurity studies involving attacks, faults, and...
Fast Frame Rate Estimation in Electromagnetic Side-Channel Attacks on Public Systems
Frame refresh rate estimation is a fundamental step in identifying compromising harmonic frequencies in electromagnetic side-channel attacks. Methods based on discrete linear autocorrelation DLA are robust across different scenarios and require a computational complexity of $ON\log N$ for a signa...
The vulnerability of the `unpack_32bit()` function in software for storing OpenEXR images with a wide dynamic range of brightness levels allows a hacker to cause a service failure.
The vulnerability of the unpack32bit function in software for storing OpenEXR images with a wide dynamic range of brightness levels is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...
The vulnerability of the .NET software platform and the Visual Studio Code editor, related to deficiencies in HTTP request processing, allows attackers to disclose sensitive information.
The vulnerability of the .NET software platform and the code editor Visual Studio Code is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
The vulnerability of the application software interface of the Cisco Identity Services Engine (ISE) and the Cisco ISE Passive Identity Connector (ISE-PIC), a virtual device for collecting user authentication data, allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.
The vulnerability of the application software interface of the Cisco Identity Services Engine ISE and the Cisco ISE Passive Identity Connector ISE-PIC, which are used for user authentication data collection, is related to the failure to implement measures to neutralize special elements. Exploitin...
The vulnerability of software for storing images in OpenEXR format, which has a wide dynamic range of brightness levels, arises from the possibility of the operation exceeding the buffer boundaries in memory. This allows an attacker to cause a service failure.
The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
Malicious code in @memtensor/memos-cloud-openclaw-plugin (npm)
On September 23, 2026, an attacker published malicious versions of two MemTensor packages. The affected packages are the OpenClaw plugin @memtensor/memos-cloud-openclaw-plugin on npm and the MemOS Python library MemoryOS on PyPI. Both versions contain the same Go implant, sckit. The binary runs i...
Malicious code in ubiquiti-agents-link-mcp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8827e987697ea6ef619055c53ae1654800a838c18419ffc8a09e872c6f16adc4 The package's bin entry index.js runs execSync'id' and collects os.userInfo.username and os.hostname, then HTTPS-POSTs the JSON payload to the...
Malicious code in ndmcjcxiebysfdb (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5d6d78591ddbd2abc8045f5bdbe7694d000b3508dc8df6393ffd46d093351ef4 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
Malicious code in @client-web-next/logger (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @client-web-next/ab-landing-form (npm)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2026-90406
In the Linux kernel, the following vulnerability has been resolved: media: qcom: iris: handle runtime PM resume failure in core deinit Check the return value of pmruntimeresumeandget in iriscoredeinit. If runtime PM resume fails, skip hardware power-off operations but still perform software...
Malicious code in bunlders (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bunlde (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bundlur (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bundlser (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bundlner (RubyGems)
--- -= Per source details. Do not edit below this line.=-...