ROS-20260928-73-0020

The vulnerability of the mm/hugetlb.c module in the Linux operating system is related to state management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0023

The vulnerability of the usbnetresumerx function in the drivers/net/usb/usbnet.c module of the Linux kernel is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0035

The vulnerability of the updateqosrequest function in the Linux operating system is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0038

The vulnerability of the parseapplysbmountoptions function in the Linux operating system is related to errors that occur when a string or array is terminated with the NULL character. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0074

The vulnerability of the sndusbcreatestreams function in the Linux operating system’s USB audio driver is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0099

The vulnerability of the drivers/base/regmap/regmap-slimbus.c component in the Linux operating system is related to errors during resource release. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0040

The vulnerability of the kernel/sys.c module in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260928-73-0084

The vulnerability of the Linux operating system’s components such as drivers, GPU, DRM, AMD, and AMDGPU cores is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260928-73-0085

The vulnerability of the virtio-net component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability allows an attacker to cause a service failure...

ROS-20260928-73-0102

The vulnerability of the drivers/net/wireless/broadcom/brcm80211/brcmfmac component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260928-73-0111

The vulnerability of the topologyparsecpucapacity function in the drivers/base/archtopology.c file of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260928-73-0097

The vulnerability of the functions cdnspgadgetinit and cdnspgadgetexit in the kernel module drivers/usb/cdns3/cdnsp-gadget.c of the Linux operating system is related to memory initialization errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260928-73-0122

The vulnerability of the drivers/pci/controller/cadence components in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...

CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...

CVE-2026-94418 Signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY

Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...

CVE-2026-94418

WolfSSL is vulnerable to a cryptographic signature verification bypass when the WOLFSSL_SMALL_CERT_VERIFY option is enabled. The ProcessPeerCertParse() function separates signature checks from parsing to save memory but fails to merge the signature result if a parse error occurs, effectively hidi...

CVE-2026-94418

Under WOLFSSLSMALLCERTVERIFY, ProcessPeerCertParse runs the certificate signature check separately from the parse to keep peak memory down, then merges the two results, but it merged the signature result back only when the parse returned 0, so any parse error hid it. ParseCertRelative reaches its...

FreePBX-SQLi-RCE

FreePBX CVE-2025-57819 - PoC d'injection SQL non authentifiée menant à une RCE Usage éducatif et recherche en sécurité uniquement - Voir l'avis juridique ci-dessous Preuve de concept d'exploitation pour CVE-2025-57819, une vulnérabilité critique d'injection SQL non authentifiée dans FreePBX...

PT-2026-99730

Name of the Vulnerable Software and Affected Versions OpenDKIM versions prior to 2.11.1 Description A remote off-by-one error exists in the Decoder component within the dkim qp decode function of the util.c file. An off-by-one error occurs when a program writes one byte past the end of the buffer...