CVE-2026-76837 Baserow before 2.3.0 Stored Cross-Site Scripting via Rich Text Mention Display Name

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

EUVD-2026-65009

Baserow interpolates a user's display name into the rich-text mention markup without HTML encoding. PATCH /api/user/account/ stores the firstname value verbatim, and the mention renderer in web-frontend/modules/core/editor/mention.js builds its element with a template literal that places the name...

vpod

Vpod البدء • التوثيق • المشكلات • المساهمة ما هو vpod؟ vpod هو صندوق رمل sandbox خفيف الوزن وقابل للنقل يمنح عملية غير موثوقة بيئة لينكس فورية. يستخدم بنية RISC‑V ويعمل بالكامل داخل WebAssembly. إقلاع سريع : الإقلاع في أقل من ثانية. قابل للنقل : يعمل في أي مكان دون الحاجة إلى أي إعداد. معزول : تب...

mojo-v

Mojo-V: Calcolo Segreto per RISC-V Mojo-V pronunciato “mojo-five” è una nuova estensione RISC-V che introduce capacità di programmazione orientate alla privacy per RISC-V. Mojo-V implementa il calcolo segreto, consentendo un'esecuzione sicura, efficiente e data-oblivious senza affidarsi a softwar...

DeadDialect

DeadDialect Jeder Systemstart spricht eine andere Sprache. Die Binärdatei von gestern ist der tote Code von heute. Ein sitzungs-eindeutiges RISC-V-ISA-Umordnungssystem. Bei jedem Systemstart wird eine neue kryptografische Permutation des Befehlssatzes erzeugt. Für eine Sitzung kompilierte...

sfuzz

SFUZZ Startdatum: Dez. 2021 Dies ist ein coverage-gesteuerter, emulationsbasierter Greybox-Fuzzer, der einen eigenen Just-In-Time-Compiler nutzt, um eine nahezu native Leistung zu erreichen. Er funktioniert, indem RISC-V-ELF-Binaries in eine Zwischendarstellung Intermediate Representation angehob...

s6_pcie_microblaze

PCI Express DIY-Hacking-Toolkit Allgemeine Informationen Inhalt SP605-Board-Konfiguration Softwarekonfiguration Beispiele Verwendung der Python-API Praktische DMA-Angriffe Option-ROM-Angriffe Fehlerbehebung Erstellen des Projekts aus dem Quellcode Allgemeine Informationen Dieses Repository enthäl...

GoTEE

Introduzione Il framework GoTEE implementa l'istanziazione concorrente di unikernel basati su TamaGo in modalità privilegiata e non privilegiata, che interagiscono tra loro tramite la modalità monitor e chiamate di sistema personalizzate. Con queste capacità, GoTEE implementa ambienti di esecuzio...

CVE-2026-74524

A flaw was found in the Linux kernel. When performing memory hot-remove operations on systems using RISC-V architecture, an out-of-bounds page-table walk can occur. This issue arises because the system attempts to access memory outside of its designated boundaries, potentially leading to a kernel...

Linux Distros Unpatched Vulnerability : CVE-2025-25977

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in canvg v.4.0.2 allows an attacker to execute arbitrary code via the Constructor of the class StyleElement. CVE-2025-25977 Note that Nessus relies on...

CVE-2026-67846-BOOM-NBDTLB

CVE-2026-67846: Assegnazione errata dei privilegi in BOOM NBDTLB ID CVE CVE-2026-67846 Panoramica La Berkeley Out-of-Order Machine BOOM al commit 5223e44cfeb26f41380057a2eb4d651197475f69 contiene un potenziale problema di assegnazione errata dei privilegi nelle implementazioni NBDTLB v3 e v4. Il...

EUVD-2026-62481

SQL Injection vulnerability in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to execute arbitrary code via the apivedo/chat endpoint and the utentechat parameter...

CVE-2026-67846

BOOM (Berkeley Out-of-Order Machine) contains a potential incorrect privilege assignment vulnerability in its v3 and v4 NBDTLB implementations, identified at commit 5223e44c. The root cause is that the raw mstatus.SUM value participates in read and write permission logic without an explicit local...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

CVE-2026-72013

A flaw was found in the Linux kernel. Specifically, within the riscv architecture's machinekexecprepare function, a NULL pointer dereference can occur. This vulnerability arises when a NULL buffer is copied without proper validation during the kexec preparation process. An attacker could...

PT-2026-76873

Name of the Vulnerable Software and Affected Versions O2OA version 10.0.2 Description A local attacker can execute arbitrary code by exploiting the sandbox mechanism used during the execution of the Invoke script. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-67965

Tenda W20E V5.0 firmware US_W20EV5.0qu_V16.01.0.6(2782)_CN&EN_TDE01.bin exposes url_need_login to bypass authentication when the admin password is empty (factory default), enabling unauthenticated activation of /goform/ate — an AES-128-CBC backdoor on UDP/7329 using hardcoded key Tenda0123456789M...

PT-2026-76674

Just a quick note that I saw a new SABB Active Backup spk posted this morning. Version is 3.2.1-25059 dated 12-Aug-2026. This is one of my most important packages so I'll be checking it out. Changelog Fixed a security vulnerability CVE-2026-15716 Fixed an issue where backing up or restoring Hyper...

CVE-2026-50775

DataHub v1.5.0.1 is vulnerable to a blind SSRF flaw where the server fetches images from attacker-supplied URLs, enabling remote code execution without authentication. CVSS 3.1 scores it CRITICAL (9.8), and CISA's SSVC assessment marks it as automatable with total technical impact. No patch versi...

SUSE CVE-2026-74524

In the Linux kernel, the following vulnerability has been resolved: riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove removepudmapping and removep4dmapping obtain a child table base with pudoffsetp4dp, 0 and p4doffsetpgd, 0, then add the index for addr. RISC-V folds page-table...