The vulnerability in the net/netfilter/nf_tables_api.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the net/netfilter/nftablesapi.c module of the Linux operating system is related to insufficient input data validation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `zynqmp_dp_ignore_hpd_set()` function in the `drivers/gpu/drm/xlnx/zynqmp_dp.c` file of the Direct Rendering Infrastructure (DRI) driver for the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the zynqmpdpignorehpdset function in the drivers/gpu/drm/xlnx/zynqmpdp.c file of the Direct Rendering Infrastructure DRI driver for the Linux operating system leads to a mutual locking condition. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the cifs_demultiplex_thread() function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the cifsdemultiplexthread function in the fs/smb/client/connect.c module, which is part of the SMB client support in Linux kernel, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `btrfs_create_pending_block_groups()` function in the `fs/btrfs/block-group.c` file of the Linux kernel’s filesystem allows a attacker to cause a service failure.

The vulnerability of the btrfscreatependingblockgroups function in the fs/btrfs/block-group.c file of the Linux kernel’s filesystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the BPF_CALL_3() function in the net/core/filter.c module allows a hacker to trigger a service failure. This vulnerability is related to the support for kernel network functions in the Linux operating system.

The vulnerability of the BPFCALL3 function in the net/core/filter.c module related to Linux kernel network functions is associated with errors during the update of the reference counter. Exploiting this vulnerability could allow an attacker to cause a service failure...

OpenClaw's Nextcloud Talk webhook missing rate limiting on shared secret authentication

Summary Nextcloud Talk webhook signature failures were not throttled even though the integration relies on an operator-configured shared secret that may be weak. Impact An attacker who could reach the webhook endpoint could brute-force weak secrets online and then forge inbound webhook events...

SUSE CVE-2026-33986

FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to version 3.24.2, in yuvensurebuffer in libfreerdp/codec/h264.c, h264-width and h264-height are updated before the reallocation loop. If any winpralignedrecalloc call fails, the function returns FALSE but width/height are...

EUVD-2026-17581

A Blind SQL Injection vulnerability exists in SourceCodester Loan Management System v1.0. The vulnerability is located in the ajax.php file specifically the saveloan action. The application fails to properly sanitize user input supplied to the "borrowerid" parameter in a POST request, allowing an...

The US Military’s GPS Software Is an $8 Billion Mess

The GPS Next-Generation Operational Control System was due for completion in 2016. Ten years later, the software for controlling the military’s GPS satellites still doesn’t work...

CVE-2026-34210

mppx is a TypeScript interface for machine payments protocol. Prior to version 0.4.11, the stripe/charge payment method did not check Stripe's Idempotent-Replayed response header when creating PaymentIntents. An attacker could replay a valid credential containing the same spt token against a new...

CVE-2026-34377 Zebra has a Consensus Failure due to Improper Verification of V5 Transactions

ZEBRA is a Zcash node written entirely in Rust. Prior to zebrad version 4.3.0 and zebra-consensus version 5.0.1, a logic error in Zebra's transaction verification cache could allow a malicious miner to induce a consensus split. By matching a valid transaction's txid while providing invalid...

The Broken System That Keeps Shipping Crews Stranded in the Strait of Hormuz

Vessels are increasingly being abandoned during the war on Iran, revealing a hidden failure in the global systems that keep goods—and people—moving...

CVE-2026-32982

OpenClaw before 2026.3.13 contains an information disclosure vulnerability in the fetchRemoteMedia function that exposes Telegram bot tokens in error messages. When media downloads fail, the original Telegram file URLs containing bot tokens are embedded in MediaFetchError strings and leaked to lo...

CVE-2026-30077

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 01 88...

The vulnerability of the dpll_device_get_by_id() function in the drivers/dpll/dpll_core.c module of the DPLL kernel driver of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dplldevicegetbyid function in the drivers/dpll/dpllcore.c module of the DPLL kernel driver of the Linux operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fuse_read_args_fill() function in the fs/fuse/file.c module, which supports the Linux file system, allows a hacker to cause a service failure.

The vulnerability of the fusereadargsfill function in the fs/fuse/file.c module of the Linux kernel’s file system support mechanism is related to incorrect input data validation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-36428

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A double free issue exists in the net/x25 component. When alloc skb fails within the x25 queue rx frame function, the system calls kfree skbskb and returns an error. This error propagate...

The vulnerability of the tze_seq_start() function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature management driver allows a hacker to cause a system failure.

The vulnerability of the tzeseqstart function in the drivers/thermal/thermal Debugfs.c module of the Linux kernel’s temperature control driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the `__cow_file_rangeInline()` function in the fs/btrfs/inode.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the cowfilerangeInline function in the fs/btrfs/inode.c module of the Linux kernel is related to the lack of resource release after the expiration of the license period. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the tegra241_vcmdq_alloc_smmu_cmdq() function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux operating system’s IOMMU kernel driver allows a attacker to cause a service failure.

The vulnerability of the tegra241vcmdqallocsmmucmdq function in the drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c file of the Linux kernel’s IOMMU support driver is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a system failure...