33891 matches found
CVE-2026-25288
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
Malicious code in @servicetitan/time-zones (npm)
npm/@servicetitan/time-zones is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
Malicious code in @onereach/time-interpreter (npm)
npm/@onereach/time-interpreter is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
MAL-2026-11657 Malicious code in @onereach/time-interpreter (npm)
npm/@onereach/time-interpreter is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and...
GHSA-33VJ-92QQ-66HC
creationtimestamp| type| source ---|---|--- 2026-08-04 15:15:12+00:00| seen| https://gist.github.com/cwayne18/2df919c96745d903491c33321eb89359 2026-08-05 12:34:16+00:00| seen| https://gist.github.com/cwayne18/b5c32c67446c8ec50f54ec955ba4ef5b 2026-08-05 21:55:34+00:00| seen|...
CVE-2026-25288 Buffer Over-read in WLAN Firmware
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-25288
CVE-2026-25288 refers to a transient denial-of-service in WLAN firmware when handling a short target wake time channel usage response frame built with insufficient packet size. Documented in multiple sources (CVE, NVD, CVE list, EUVD), this appears to affect WLAN firmware as reported, with root c...
CVE-2026-25288 Buffer Over-read in WLAN Firmware
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
EUVD-2026-52736
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-25288
Transient DOS when processing a short target wake time channel usage response frame with insufficient packet size...
CVE-2026-12050
creationtimestamp| type| source ---|---|--- 2026-08-04 13:00:19+00:00| seen| https://t.me/cyberoknews/229 2026-08-05 00:00:35+00:00| seen| https://t.me/cyberoknews/229 2026-08-06 00:00:57+00:00| seen| https://t.me/cyberoknews/229...
RLSA-2026:49213 Important: kernel-rt security update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: rtnetlink: add missing netlinknscapable check for peer netns CVE-2026-31692 kernel: netfilter: ctnetlink: ensure safe access to...
kernel-rt security update
An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...
PYSEC-2026-3559 `datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
Summary When the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @fieldvalidator... decorator from each entry. The field names and the validator mode are interpolated into the...
`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
Summarydatamodel-code-generator is vulnerable to code injection when generating Python models from an attacker-controlled JSON Schema, OpenAPI, YAML, JSON, Avro, Protobuf, or XSD schema. When a property carries a "defaultfactory" key, its value is interpolated verbatim — as a raw Python expressio...
`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
SummaryWhen the Pydantic v2 output mode is in use, datamodel-code-generator reads a validators array from each model entry in the --extra-template-data file and synthesises a Pydantic @fieldvalidator... decorator from each entry. The field names and the validator mode are interpolated into the...
PYSEC-2026-3555 `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
Summary datamodel-code-generator is vulnerable to code injection when generating Python models from an attacker-controlled JSON Schema, OpenAPI, YAML, JSON, Avro, Protobuf, or XSD schema. When a property carries a "defaultfactory" key, its value is interpolated verbatim — as a raw Python expressi...
Open WebUI: Account enumeration via observable login timing discrepancy
SummaryThe /api/v1/auths/signin endpoint leaked whether an email address belonged to a registered account through a response-time side channel. Password verification ran bcrypt only when the email was found in the database; for a non-existent email the request returned early without hashing. The...
PYSEC-2026-3594 Open WebUI: Account enumeration via observable login timing discrepancy
Summary The /api/v1/auths/signin endpoint leaked whether an email address belonged to a registered account through a response-time side channel. Password verification ran bcrypt only when the email was found in the database; for a non-existent email the request returned early without hashing. The...