42451 matches found
CVE-2026-81666
An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an...
CVE-2026-81666 Corosync: corosync: integer overflow in check_memb_commit_token_sanity may bypass message length validation on 32-bit systems
An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an...
CVE-2026-81666
An integer overflow was found in Corosync's handling of membership commit token messages. The length-validation check for these messages can be bypassed on 32-bit systems due to an integer overflow in the calculation of the expected message length, allowing a crafted network packet to trigger an...
CVE-2026-78897 vulnerabilities
Vulnerabilities for packages: chromium...
PT-2026-85450
Name of the Vulnerable Software and Affected Versions Corosync affected versions not specified Description An integer overflow exists in the handling of membership commit token messages. On 32-bit systems, the length-validation check for these messages can be bypassed because the expected message...
Linux Distros Unpatched Vulnerability : CVE-2026-81666
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow was found in Corosync's handling of membership commit token messages. The length- validation check for these messages can be bypassed on...
CVE-2026-76172 vulnerabilities
Vulnerabilities for packages: wazuh-dashboard, arangodb, keep, opensearch-dashboards, gitlab-rails-ce, vitess, prism, opensearch-dashboards-fips, keep-fips, kibana, gitlab-rails-ce-fips, unleash, langfuse, langfuse-fips, unleash-proxy, unleash-fips, yaml-language-server, nextcloud-server,...
CVE-2026-67315 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, prism, langfuse, nextcloud-server, lerna, opensearch-dashboards...
EUVD-2026-66347
When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet formerly UNC5669 since 2024. Google Threat Intelligence Group GTIG and Mandiant teams described the threat actor as "specializing in manipulating...
JENGA: Exploiting Counter-Based RowHammer Countermeasures to Break Real-Time Predictability
Safety-critical real-time systems must satisfy multiple dependability requirements, notably time predictability and security. In such systems, tasks must complete within bounded and known execution times, typically characterised through Worst-Case Execution Time WCET analysis. At the same time,...
Awesome-LLMs-for-Vulnerability-Detection — Updated!
Awesome Large Language Models for Vulnerability Detection A curated list of papers, projects, and agent skills on using LLMs for vulnerability detection and discovery. 📄 Papers Only showing 2025 and later. For earlier work, see Papers Archive 2024 and earlier. Title| Venue| Year| Paper| Github...
CVE-2026-27878 vulnerabilities
Vulnerabilities for packages: commercial-grafana, grafana, grafana-fips...
CVE-2026-55520
Protego is a pure-Python robots.txt parser with support for modern conventions. Prior to 0.6.2, protego.urlpattern.URLPattern.preparepatternforregex translates every asterisk in an Allow or Disallow directive into a lazy regular-expression wildcard, so a directive containing many asterisks create...
CVE-2026-77975
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:44+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05...
CVE-2026-73819
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:42+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:00:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufbmp6qrf2e 2026-08-31 18:07:30+00:00| seen|...
CVE-2026-76133
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:40+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-31 16:10:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mufc6jjqv72p 2026-08-31 18:07:40+00:00| seen|...
CVE-2026-69658
creationtimestamp| type| source ---|---|--- 2026-08-27 16:15:38+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-239-05 2026-08-28 02:08:04+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu4bq3g6b42m 2026-08-29 13:12:09+00:00| seen|...