234559 matches found
CVE-2026-17348
In pgAdmin 4 SERVER mode, CVE-2026-17348 describes missing authentication enforcement on several routes (Constraints blueprint: nodes, proplist, and delete; preferences.get_all_cli; debugger.close; schema_diff.close). The lack of @pga_login_required allows an unauthenticated client to enumerate c...
Exploit for CVE-2026-64531
OVSwrap CVE-2026-64531 Mitigation Tool A simple script that...
Malicious code in walmart-genai-trace (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7e84b4bbb5660ea5c7f803c4e5d0b12dfe41c9bb147fd2228c72bdda2224291a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-11420 Malicious code in walmart-genai-trace (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7e84b4bbb5660ea5c7f803c4e5d0b12dfe41c9bb147fd2228c72bdda2224291a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
cam-hunter
📡 CAM HUNTER — Advanced DVR / NVR / XVR Security Testing Frame...
CVE-2026-65636
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...
BARE
!Claude Code Friendlyhttps://img.shields.io/badge/ClaudeCod...
CVE-2026-65636 YAML injection via unescaped newlines in ymlr document comments
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...
EEF-CVE-2026-65636 YAML injection via unescaped newlines in ymlr document comments
Summary Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a...
EUVD-2026-51537
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...
CVE-2026-65636
The CVE-2026-65636 issue affects the ymlr library (Elixir.Ymlr) and its document encoding entry points (Ymlr.document!/2, Ymlr.documents!/2, Ymlr.documents/2). An attacker-controlled comment string is interpolated behind a single #, and CRLF sequences terminate the YAML comment, allowing injectio...
CVE-2026-65636
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...
CVE-2026-65636 YAML injection via unescaped newlines in ymlr document comments
Improper Neutralization of CRLF Sequences vulnerability in ufirstgroup ymlr Elixir.Ymlr module allows attackers to inject arbitrary content into generated YAML documents through document comments. Ymlr.document!/2 interpolates each caller-supplied comment string into the output behind a single...
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems allows a hacker to cause a service failure.
The vulnerability in the drivers/bluetooth/btnxpuart.c module of Linux operating systems is related to incorrect resource management. Exploiting this vulnerability can allow an attacker to cause service failures...
ChainHangLow
QNAP Firmware Encryption Key Extraction - CVE Exploitation Gui...
USN-8620-3: Linux kernel (Intel IoTG) vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
USN-8620-3 linux-intel-iot-realtime, linux-intel-iotg-5.15 vulnerabilities
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose...
Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j
Summary Security Bulletin: IBM Engineering Systems Design Rhapsody TestConductor was affected by Vulnerability in log4j. Even though Rhapsody risk impact was low we have addressed these Vulnerability on our latest iFIx for all versions. Vulnerability Details CVEID:CVE-2026-34477 DESCRIPTION: The...
kernel: xen/privcmd: fix double free via VMA splitting
A flaw was found in the Linux kernel's xen/privcmd module. A local user could exploit this by performing a partial unmapping of a privcmd memory region. This action causes a Virtual Memory Area VMA to split, leading to duplicated internal memory pointers. As a result, the same memory can be freed...