9607 matches found
wolfSSL 安全漏洞
wolfSSL CyaSSL is a small, portable embedded SSL programming library developed by the US company wolfSSL, aimed at developers working with embedded systems. Version 5.8.4 of wolfSSL contains a security vulnerability. This vulnerability stems from the lack of a software implementation for 64-bit...
Linux Distros Unpatched Vulnerability : CVE-2026-3580
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This...
CVE-2026-3580: Observable Discrepancy
In wolfSSL 5.8.4, constant-time masking logic in sp256getentry2569 is optimized into conditional branches bnez by GCC when targeting RISC-V RV32I with -O3. This transformation breaks the side-channel resistance of ECC scalar multiplication, potentially allowing a local attacker to recover secret...
[SECURITY] Fedora 43 Update: systemd-258.7-1.fc43
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses sock et and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
MINI-2XCP-8V35-QHRP
Bulletin has no description...
The vulnerability of the Windows Hyper-V hardware virtualization system allows attackers to escalate their privileges.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2026-11099
The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27. This is due to inconsistent input sanitization between the frontend AJAX handler and the REST API endpoint. When entries are...
CVE-2026-2707: Improper Neutralization of Input During Web Page Generation
The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27. This is due to inconsistent input sanitization between the frontend AJAX handler and the REST API endpoint. When entries are...
EUVD-2026-10634
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
EUVD-2026-10635
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-25170
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-25170
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
CVE-2026-25170
Technical details for CVE-2026-25170 are not publicly provided in the supplied documents. Monitor updates from Microsoft and national advisories for affected products, fixes, and confirmed impact.
CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability
...
CVE-2026-25170 Windows Hyper-V Elevation of Privilege Vulnerability
...
Malicious code in test-logsmodule-v-zisko (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c6f59f2c34febf5b71ba7f6912540619742de8815167ecc99397fe9b5b9eced9 The package test-logsmodule-v-zisko was found to contain malicious code. Source: ghsa-malware...
Windows Hyper-V Elevation of Privilege Vulnerability
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
📄 Universal‑Ctags V Language 6.2.1 Parser Uncontrolled Recursion
A denial of service issue has been discovered in Universal‑Ctags versions 6.2.1 and below affecting the V language parser component. ============================================================================================================================================= | Title :...
CVE-2026-25170: Use After Free
Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally...
Microsoft Hyper-V 资源管理错误漏洞
Microsoft Hyper-V is an application developed by Microsoft Corporation in the United States. It is a system management program that enables desktop virtualization. There is a resource management vulnerability in Microsoft Hyper-V. Attackers can exploit this vulnerability to gain higher privileges...