Linux Distros Unpatched Vulnerability : CVE-2021-4235

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Due to unbounded alias chasing, a maliciously crafted YAML file can cause the system to consume significant system resources. If parsing user input, this may be...

CVE-2025-23285: Incorrect Permission Assignment for Critical Resource

NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager, where it allows a guest to access global resources. A successful exploit of this vulnerability might lead to denial of service...

PT-2025-31754 · Nvidia · Nvidia Vgpu

Name of the Vulnerable Software and Affected Versions: NVIDIA vGPU software affected versions not specified Description: NVIDIA vGPU software contains a flaw in the Virtual GPU Manager that could allow a guest to access global resources, potentially leading to a denial of service. Recommendations...

Red Database Heap Buffer Overflow DoS

The vulnerability of the CtrlCHandler function in the why.cpp module of the “Red Database” database management system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Linux mhi_ep_ring_add_element Heap Buffer Overflow DoS

The vulnerability of the mhiepringaddelement function in the Linux operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-54576

Observations on CVE-2025-54576 : OAuth2-Proxy versions up to 7.10.0 expose an authentication bypass when using skip_auth_routes with regex patterns, because skip_auth_routes can match the full request URI (path + query parameters) instead of only the path. This allows an attacker to craft URLs wi...

tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

A flaw has been discovered in path handling logic in Apache Tomcat. When using either PreResources or PostResources mounted on a non-root path, it is possible to access resources via an unexpected path. This may result in leaking of files on those paths...

tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

A flaw has been discovered in path handling logic in Apache Tomcat. When using either PreResources or PostResources mounted on a non-root path, it is possible to access resources via an unexpected path. This may result in leaking of files on those paths...

netfilter Heap Buffer Overflow DoS

The vulnerability of the nfflowpppoeproto function in the netfilter component of the Linux operating system is related to the use of uninitialized resources. Exploiting this vulnerability could allow a attacker to cause a service failure...

Microsegmentation in Zero Trust Part One: Introduction and Planning

The Journey to Zero Trust series covers cybersecurity capabilities and architecture supporting organization adoption of modern zero trust ZT principles. ZT’s core concept of never trust and always verify evolved from prior cybersecurity models. This current ZT series supports an organization’s ZT...

CVE-2025-36071

IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server 11.5.0 through 11.5.9 and 12.1.0 through 12.1.2 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query due to improper release of memory resources...

CVE-2025-36071

CVE-2025-36071 – IBM Db2 family Summary: IBM Db2 for Linux/UNIX/Windows (incl. DB2 Connect Server) is vulnerable to a denial of service where the server may crash under certain crafted queries due to improper release of memory resources. Impact is limited to specific versions and configurations d...

PT-2025-31250 · Ibm · Ibm Db2 For Linux +1

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 11.5.0 through 11.5.9 IBM Db2 for Linux, UNIX and Windows includes DB2 Connect Server versions 12.1.0 through 12.1.2 Description: The software is susceptible to a denial...

Niagara Framework Permission Bypass

The vulnerability of the device management platform for heating, ventilation, and air conditioning systems, lighting, and energy consumption control within the Niagara Framework, along with the access control and security measures of Niagara Enterprise Security, is related to the incorrect...

Linux remoteproc Heap Buffer Overflow DoS

The vulnerability of the rprochandleresources function in the remoteproc component of the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failu...

SUSE CVE-2024-38534

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Crafted modbus traffic can lead to unlimited resource accumulation within a flow. Upgrade to 7.0.6. Set a limited stream.reassembly.depth to reduce the issue...

tomcat: Apache Tomcat: Security constraint bypass for pre/post-resources

A flaw has been discovered in path handling logic in Apache Tomcat. When using either PreResources or PostResources mounted on a non-root path, it is possible to access resources via an unexpected path. This may result in leaking of files on those paths...

TEE-reversing

This repository is an offensive tool for learning how to reverse-engineer and achieve trusted code execution on ARM devices. It contains a curated list of public TEE resources, including papers on TEE reversing and security analysis. The repository includes links to various papers and resources o...

awesome-android-security

A curated list of Android Security materials and resources For Pentesters and Bug Hunters...

osx-security-awesome

It is an offensive tool for collecting and categorizing OSX and iOS security resources. The primary CVE ID is not present in the provided context. The target product/service or framework is not explicitly stated, but the tool appears to be collecting resources related to OSX and iOS security. The...