Lucene search
+L

7 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/09/24 1:16 p.m.•3 views

Malicious code in @nf-addons/am-global-header (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5f4f7297a2ae76eee65506183462a7138df6115ee2bfad9c84878b7f3c7998c8 The package's install lifecycle script runs node index.js, which loads runtime/support/telemetry/probe/impl.js. That module reads os.userInfo.usernam...

5.8AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/03/26 3:11 p.m.•19 views

CVE-2026-32705

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

6.8CVSS5.9AI score0.0028EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/16 2:19 p.m.•13 views

CVE-2026-32705

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

6.8CVSS0.0028EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2026/03/16 12:00 a.m.•24 views

PX4-Autopilot 安全漏洞

PX4-Autopilot is an open-source drone autopilot system developed by PX4. Versions of PX4-Autopilot prior to 1.17.0-rc2 contained security vulnerabilities. These vulnerabilities stemmed from the BST telemetry probe’s use of a length-based string terminator without proper boundary checks, which cou...

6.8CVSS5.9AI score0.0028EPSS
SaveExploits1References1
EUVD
EUVD
•added 2026/03/13 9:15 p.m.•20 views

EUVD-2026-12148

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

6.8CVSS5.9AI score0.0028EPSS
SaveExploits1References1
OSV
OSV
•added 2026/03/13 9:15 p.m.•11 views

CVE-2026-32705 PX4 autopilot BST Device Name Length Can Overflow Driver Buffer

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

6.8CVSS5.9AI score
SaveExploits0References3
Cvelist
Cvelist
•added 2026/03/13 9:15 p.m.•47 views

CVE-2026-32705 PX4 autopilot BST Device Name Length Can Overflow Driver Buffer

PX4 autopilot is a flight control solution for drones. Prior to 1.17.0-rc2, the BST telemetry probe writes a string terminator using a device-provided length without bounds. A malicious BST device can report an oversized devnamelen, causing a stack overflow in the driver and crashing the task or...

6.8CVSS0.0028EPSS
SaveExploits1References1
Rows per page
Query Builder