GHSA-7H3G-4W2F-FJ2F

creationtimestamp| type| source ---|---|--- 2026-07-30 00:32:17+00:00| seen| https://gist.github.com/alon710/0b988f8772f0747494691334f261cc01...

CVE-2026-12436

creationtimestamp| type| source ---|---|--- 2026-07-29 22:09:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrswusxhll2v 2026-07-30 04:46:01+00:00| seen| https://www.hkcert.org/security-bulletin/gitlab-multiple-vulnerabilities20260730 2026-07-30 14:15:30+00:00| seen|...

kernel: net: sched: UAF via missing handler for TC_ACT_CONSUMED in tcf_qevent_handle

A flaw was found in the Linux kernel's traffic control TC classifier application programming interface API. The tcfqeventhandle function does not properly handle a consumed socket buffer skb when it is processed by the defragmentation engine. This can lead to a Use-After-Free UAF vulnerability,...

CVE-2026-5491

creationtimestamp| type| source ---|---|--- 2026-07-29 21:10:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrstkhdrfa2g 2026-07-30 02:00:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrtdsleuvm2m...

CVE-2026-40272

Improper Input Validation in the decode function of the traceparser library could allow an attacker with a corrupted kernel trace event log .kev file, to execute arbitrary code or cause a crash in processes that use libtraceparser in QNX hosts or targets...

CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

CVE-2026-59901 Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the Bzip2Decoder handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the...

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity

A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the expand function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-lo...

CVE-2026-59920

Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.136.Final and 4.2.16.Final, Netty's STOMP encoder StompSubframeEncoder does not escape or validate header values in CONNECT and CONNECTED frames, so raw newline \n characters in a header value are...

GHSA-4P3G-4HCJ-WPVX

creationtimestamp| type| source ---|---|--- 2026-07-29 16:32:11+00:00| seen| https://gist.github.com/alon710/fffec7ff7a3f093df17d5e871ff03c84...

CVE-2026-15144

creationtimestamp| type| source ---|---|--- 2026-07-29 16:15:54+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3mrsd4ilqss2c 2026-07-29 19:43:29+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrsopqnc4r2l...

CVE-2026-64291

A flaw was found in the Linux kernel's iommufd subsystem. A local user could exploit this vulnerability by allocating excessively large event queues, leading to the exhaustion of kernel memory. This can result in a Denial of Service DoS for the system...

GHSA-4CWX-7WF7-3272

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:07+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2kt7jx23 2026-08-03 19:25:00+00:00| seen| https://bsky.app/profile/thestandup.bsky.social/post/3ms77zcaiyk2n...

CVE-2026-66489

creationtimestamp| type| source ---|---|--- 2026-07-29 14:38:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrs5npxyln2q...

GHSA-8M8R-38JM-F355

creationtimestamp| type| source ---|---|--- 2026-07-29 13:32:26+00:00| seen| https://gist.github.com/alon710/9d9829ba6ab40face903027898206e80...

GHSA-7JXR-CG7F-GPGV

creationtimestamp| type| source ---|---|--- 2026-07-29 12:03:19+00:00| seen| https://t.me/sysadminup/1645 2026-07-30 00:03:05+00:00| seen| https://t.me/sysadminup/1645 2026-08-04 03:00:05+00:00| published-proof-of-concept| https://t.me/sysadminup/1645 2026-08-05 00:00:57+00:00|...

CVE-2021-30557

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:50+00:00| seen| Telegram/DPLG5i7obZNHLYAA2CRlChFMhynMyOlYEo2fOgnuGeKe7A 2026-07-30 00:02:02+00:00| seen| Telegram/DPLG5i7obZNHLYAA2CRlChFMhynMyOlYEo2fOgnuGeKe7A 2026-08-01 15:00:04+00:00| seen|...