CVE-2026-42684

creationtimestamp| type| source ---|---|--- 2026-06-03 07:00:11+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnejxbucxi2r...

CVE-2026-35049

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-35049 wire-ios has Persistent Remote DoS via Integer Underflow

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-35049

The CVE-2026-35049 entry affects the wire-ios iOS client. Before version 4.16.0, processing a crafted Proteus external message with an encrypted payload under 16 bytes causes an automatic crash after receipt. The malicious message remains in the conversation and causes a crash loop on relaunch, p...

CVE-2026-35049

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-35049 wire-ios has Persistent Remote DoS via Integer Underflow

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

EUVD-2026-34008

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-24221

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6febj5d2q...

CVE-2026-40715

creationtimestamp| type| source ---|---|--- 2026-06-02 18:00:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnd6f4rnyv2r...

CVE-2026-45685 OpenTelemetry eBPF Instrumentation: MongoDB parser panics on malformed wire messages

OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard. From version 0.1.0 to before version 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing a remote unauthenticated attacker to crash the telemetr...

CVE-2026-45685

Summary: OpenTelemetry eBPF Instrumentation is affected by a remote DoS in its MongoDB parser. From version 0.1.0 up to before 0.9.0, malformed MongoDB wire messages can trigger uncaught panics in the MongoDB TCP parser, allowing an unauthenticated attacker to crash the telemetry agent and termin...

JDWPEx

JDWP Remote Code Execution Exploit A Python 3 implement...

wireapp wire-ios 数字错误漏洞

wire-ios is the client layer that handles all data displayed in mobile applications. Versions of wire-ios prior to 4.16.0 have a numerical error vulnerability, which stems from a lack of length checking. This vulnerability may lead to crashes when receiving specially crafted malicious Proteus...

PT-2026-45830

wire-ios is an iOS client for the Wire secure messaging application. Prior to version 4.16.0, upon receiving a crafted malicious Proteus external message with an encrypted payload that is shorter than 16 bytes, the Wire iOS client crashes. The crash is triggered automatically after message receiv...

CVE-2026-44421

creationtimestamp| type| source ---|---|--- 2026-05-29 22:00:39+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjwskan22d...

CVE-2026-45372

creationtimestamp| type| source ---|---|--- 2026-05-29 21:01:28+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzgmyzox52g 2026-05-29 21:40:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmziti3zcz2h 2026-05-30 10:08:12+00:00| seen|...

CVE-2026-49368

creationtimestamp| type| source ---|---|--- 2026-05-29 20:07:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mmzdm6qegs25 2026-05-29 22:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmzjxbuxx72v 2026-06-01 14:37:05+00:00| seen|...

CVE-2026-32905

creationtimestamp| type| source ---|---|--- 2026-05-29 17:02:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmyzaf633z2v 2026-06-01 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnb72hkvlb25...

CLSA-2026-1780062671 Fix CVE(s): CVE-2026-41035

SECURITY UPDATE: receiver use-after-free in receivexattr via a wire-supplied xattr count passed to qsort: - debian/patches/els/0007-CVE-2026-41035.patch: sort tempxattr.count stored items instead of the untrusted wire count. - CVE-2026-41035...

CVE-2026-49325

The CVE affects the Indian Motorcycle Scout Bobber + Tech 2025 model year, where the Wireless Control Module (WCM) wiring harness controls anti‑theft shutdown. A falling‑edge voltage transition on a dedicated wire pair signals shutdown to a peer ECU, but the receiving ECU cannot distinguish an ac...