44264 matches found
USN-7976-1 node-form-data vulnerability
Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this issue to make arbitrary requests to internal systems...
USN-7976-1: Form-Data vulnerability
Ben Shonaldmann discovered that Form-data incorrectly generated boundary values for multipart form-encoded data, leading to predictable values. A remote attacker could possibly use this issue to make arbitrary requests to internal systems...
pnpm security vulnerabilities
PNPM is a package manager developed by the open-source project Pnpm. Versions of Pnpm prior to 10.28.2 had security vulnerabilities. These vulnerabilities stemmed from the lack of path validation when processing the directories.bin field of packages. This allowed malicious npm packages to modify...
Pwn2Own: Researchers Earn $1 Million for 76 Zero-Days
Discover how TrendAI Zero Day Initiative ZDI identified critical vulnerabilities across connected vehicles, EV chargers, and automotive systems...
PT-2026-4732
Name of the Vulnerable Software and Affected Versions WellChoose Single Sign-On Portal System affected versions not specified WellChoose Organization Portal System affected versions not specified Description An OS Command Injection issue exists in the WellChoose Portal Systems, potentially allowi...
VulnCheck KEV: CVE-2022-40619
A vulnerability is present in a third party module named FunJSQ, integrated on some routers and Orbi WiFi Systems. Exploitation requires an attacker to have your WiFi password or an Ethernet connection to your router...
Malicious code in overstock-login-layer (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 359cd99825c90001defddafc25d74d784b4e71a75a8adf92e90f2371dbf8a124 The package overstock-login-layer was found to contain malicious code. Source: ghsa-malware...
Linux Distros Unpatched Vulnerability : CVE-2025-71163
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dmaengine: idxd: fix device leaks on compat bind and unbind Make sure to drop the reference taken when looking up the idxd device as part of the compat bind and...
CVE-2026-24049 vulnerabilities
Vulnerabilities for packages: airflow, py3-setuptools, aws-cli, pypy-3.11, pypy-3.10, datadog-agent, pip-zipapp, mlflow, kubeflow-jupyter-web-app, open-webui, py3-cassandra-medusa, kubeflow-katib, py3-virtualenv, dask-kubernetes, emissary, semgrep, superset, kserve...
GHSA-8RRH-RW8J-W5FX vulnerabilities
Vulnerabilities for packages: nemo, py3-cassandra-medusa, azure-functions-python-worker, dask-kubernetes, opal, py3.9-setuptools, duplicity, airflow, kubeflow-jupyter-web-app, pypy-3.11, pip-zipapp, dbt-bigquery, authentik-fips, emissary, open-webui, semgrep, ghidra, py3-setuptools,...
GHSA-HX9Q-6W63-J58V vulnerabilities
Vulnerabilities for packages: litellm, kserve, datadog-agent, authentik-fips, emissary, authentik, datadog-agent-fips...
CVE-2025-67221 vulnerabilities
Vulnerabilities for packages: litellm, kserve, datadog-agent, authentik-fips, emissary, authentik, datadog-agent-fips...
CVE-2026-0528 vulnerabilities
Vulnerabilities for packages: cloudbeat, beats, apm-server-fips, cloudbeat-fips, apm-server...
A PUF-Based Security Framework for Fault and Intrusion Detection
Industrial Control Systems ICS rely on sensor feedback to keep safety-critical processes within operational limits. This research presents a hardware-root-of-trust that embeds a Physically Unclonable Function PUF at the measurement layer to authenticate sensor readings. The architecture combines...
CVE-2026-24358
Missing Authorization vulnerability in ExpressTech Systems Quiz And Survey Master quiz-master-next allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Quiz And Survey Master: from n/a through = 10.3.3...
GHSA-5RFX-CP42-P624 vulnerabilities
Vulnerabilities for packages: keycloak...
CVE-2025-39775 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-aws, linux-vmware...
CVE-2025-38237 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-aws, linux-vmware...