CVE-2026-28756: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Permissions based on Distribution Groups report...

CVE-2026-28754: Improper Neutralization of Input During Web Page Generation

Zohocorp ManageEngine Exchange Reporter Plus versions before 5802 are vulnerable to Stored XSS in Distribution Lists report...

The vulnerability of the l2tp_pre_exit_net() function in the net/l2tp/l2tp_core.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the l2tppreexitnet function in the net/l2tp/l2tpcore.c module of the Linux kernel is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

How to Configure krb5.conf for Cross-Domain Hyper-V Cluster Management

Purpose This article documents how to configure the /etc/krb5.conf file on the Veeam Software Appliance VSA to enable Kerberos authentication when managing a Microsoft Hyper-V cluster whose nodes belong to a different Active Directory domain than the backup server. As noted in the VBR 13 User Gui...

The vulnerability of the rzn1_dmamux_route_allocate() function in the drivers/dma/dw/rzn1-dmamux.c module of the Linux operating system’s DMA driver allows a attacker to cause a service failure.

The vulnerability of the rzn1dmamuxrouteallocate function in the drivers/dma/dw/rzn1-dmamux.c driver of the Linux kernel’s DMA engine is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

The Manipulate-And-Observe Attack on Quantum Key Distribution

Quantum key distribution is often regarded as an unconditionally secure method to exchange a secret key by harnessing fundamental aspects of quantum mechanics. Despite the robustness of key exchange, classical post-processing reveals vulnerabilities that an eavesdropper could target. In particula...

Policy-Driven Vulnerability Risk Quantification Framework for Large-Scale Cloud Infrastructure Data Security

The exponential growth of Common Vulnerabilities and Exposures CVE disclosures poses significant challenges for enterprise security management, necessitating automated and quantitative risk assessment methodologies. Existing vulnerability analysis approaches suffer from three critical limitations...

Debian dsa-6183 : libnode-dev - security update

The remote Debian 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6183 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-6183-1 [email protected] https://www.debian.org/securit...

Quantum Bit Error Rate Analysis in BB84 Quantum Key Distribution: Measurement, Statistical Estimation, and Eavesdropping Detection

Quantum Key Distribution QKD provides information-theoretic security by exploiting the principles of quantum mechanics. Among QKD protocols, the BB84 scheme remains the most widely adopted for both theoretical research and practical implementation. A critical parameter determining the reliability...

The vulnerability of the lpc18xx_dmamux_reserve() function in the driver/dma/lpc18xx-dmamux.c file of the Linux operating system’s DMA engine driver allows a hacker to cause a service failure.

The vulnerability of the lpc18xxdmamuxreserve function in the drivers/dma/lpc18xx-dmamux.c file of the Linux kernel’s DMA driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of the stm32_dmamux_route_allocate() function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the stm32dmamuxrouteallocate function in the drivers/dma/stm32/stm32-dmamux.c file of the Linux kernel’s DMA driver is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a remote attacker to compromise th...

The vulnerability of the btrfs_can_activate_zone() function in the fs/btrfs/zoned.c module of the Linux kernel file system allows a malicious actor to cause a service failure.

The vulnerability of the btrfscanactivatezone function in the fs/btrfs/zoned.c module of the Linux kernel’s file system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the find_and_map_user_pages() function in the drivers/accel/qaic/qaic_control.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the findandmapuserpages function in the drivers/accel/qaic/qaiccontrol.c kernel module of the Linux operating system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause service...

The vulnerability of the exynos GenericIccProbe() function in the drivers/interconnect/samsung/exynos.c driver for the Linux kernel’s interconnection module allows a hacker to cause a service failure.

The vulnerability of the exynos GenericICcProbe function in the drivers/interconnect/samsung/exynos.c driver for the Linux kernel’s interconnection module is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability can allow a perpetrator to...

PT-2026-30534

In versions prior to 2.26.1, the RMI instrumentation registered a custom endpoint that deserialized incoming data without applying serialization filters. An attacker with network access to a JMX or RMI port on an instrumented JVM could exploit this to potentially achieve remote code execution. Al...

The vulnerability of the do_feature_check_call() function in the drivers/firmware/xilinx/zynqmp.c file of the Linux kernel firmware driver allows a hacker to cause a system failure.

The vulnerability of the dofeaturecheckcall function in the drivers/firmware/xilinx/zynqmp.c file of the Linux kernel firmware driver is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a perpetrator to cause service...

The vulnerability of the hi846_init_controls() function in the drivers/media/i2c/hi846.c module of the Linux operating system’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the hi846initcontrols function in the drivers/media/i2c/hi846.c module of the Linux multimedia device driver relates to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability can allow a perpetrator to cause service failures...

The vulnerability of the icc_nodedestroy() function in the drivers/interconnect/core.c module of the Linux kernel’s interconnect driver, which allows a hacker to cause a service failure.

The vulnerability of the iccnodedestroy function in the drivers/interconnect/core.c file of the Linux kernel’s interconnect driver module is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the fec_drvremove() function in the drivers/net/ethernet/freescale/fec_main.c file of the Ethernet network adapter driver for the Freescale Linux operating system allows a hacker to cause a service failure.

The vulnerability of the fecdrvremove function in the drivers/net/ethernet/freescale/fecmain.c file of the Ethernet network adapter driver for the Freescale Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability cou...

The vulnerability of the `privcmd_ioctl_mmap_resource()` function in the `drivers/xen/privcmd.c` driver for kernel memory buffer devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the privcmdioctlmmapresource function in the drivers/xen/privcmd.c driver for kernel memory buffer devices in the Linux operating system is related to the distribution of resources without any restrictions or regulation. Exploiting this vulnerability could allow a attacker to...