The vulnerability of the TS_RESP_verify_response() function in the OpenSSL library allows a hacker to induce a service failure.

The vulnerability of the TSRESPverifyresponse function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the PKCS7_digest_from_attributes() function in the OpenSSL library allows a hacker to induce a service failure.

The vulnerability of the PKCS7digestfromattributes function in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of OpenSSL’s parsing code for PKCS#12 file formats allows a hacker to induce a service failure.

The vulnerability of the PKCS12 format form field parsing code in the OpenSSL library is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the BIO_f_linebuffer() function in the OpenSSL library, which allows a hacker to cause a service failure

The vulnerability of the BIOflinebuffer function in the OpenSSL library is related to the situation where the operation’s output goes beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-24514 ingress-nginx Admission Controller denial of service

A security issue was discovered in ingress-nginx where the validating admission controller feature is subject to a denial of service condition. By sending large requests to the validating admission controller, an attacker can cause memory consumption, which may result in the ingress-nginx...

GHSA-H395-GR6Q-CPJC jsonwebtoken has Type Confusion that leads to potential authorization bypass

Summary: It has been discovered that there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard claim such as nbf or exp is provided with an incorrect JSON type Like a String instead of a Number, the library’s internal parsing mechanism...

jsonwebtoken has Type Confusion that leads to potential authorization bypass

Summary: It has been discovered that there is a Type Confusion vulnerability in jsonwebtoken, specifically, in its claim validation logic. When a standard claim such as nbf or exp is provided with an incorrect JSON type Like a String instead of a Number, the library’s internal parsing mechanism...

When Cloud Outages Ripple Across the Internet

Recent major cloud service outages have been hard to miss. High-profile incidents affecting providers such as AWS, Azure, and Cloudflare have disrupted large parts of the internet, taking down websites and services that many other systems depend on. The resulting ripple effects have halted...

USN-8005-1 glibc vulnerabilities

Vitaly Simonovich discovered that the GNU C Library did not properly initialize the input when WRDEREUSE is used. An attacker could possibly use this issue to cause applications to crash, leading to a denial of service. CVE-2025-15281 Anastasia Belova discovered that the GNU C Library incorrectly...

EUVD-2026-5284

The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server. An improper certificates validation vulnerability allows an unauthenticated remote attacker can perform a Man-in-the-Middle MitM attack to intercept the cleartext communication,...

EUVD-2026-5283

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate. Although the connection uses HTTPS, an improper validated TLS/SSL certificates allows a remote attacker can intercept the communication to perform a Man-in-the-Middle MitM attack, whi...

EUVD-2025-206715

FUXA v1.2.7 allows Remote Code Execution RCE via the project import functionality. The application does not properly sanitize or sandbox user-supplied scripts within imported project files. An attacker can upload a malicious project containing system commands, leading to full system compromise...

PT-2026-37464

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the pstore ram core component where the persistent ram vmap function may return a non-NULL pointer even when vmap fails, provided the offset is non-zero. This occurs...

The vulnerability of the __iomap_dio_rw() function in the fs/iomap/direct-io.c module of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the iomapdiorw function in the fs/iomap/direct-io.c module of the Linux kernel file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of the __blkdev_issue_zero_pages() function in the block/blk-lib.c module, which is part of the Linux kernel’s block-level support, allows a hacker to trigger a service failure.

The vulnerability of the blkdevissuezeropages function in the block/blk-lib.c module, which supports the block-level kernel in the Linux operating system, is related to improper memory release memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the arch_kimage_file_post_load_cleanup() function in the arch/riscv/kernel/elf_kexec.c module of the kernel subsystem of the Linux operating system’s RISCV-architecture-based platform allows a attacker to trigger a service failure.

The vulnerability of the archkimagefilepostloadcleanup function in the arch/riscv/kernel/elfkexec.c module of the kernel subsystem of the Linux operating system’s RISCV architecture is related to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the `ivpu_gem_bo_free()` function in the `drivers/accel/ivpu/ivpu_gem.c` file of the Linux operating system’s Intel NPU driver allows a hacker to trigger a service failure.

The vulnerability of the ivpugembofree function in the drivers/accel/ivpu/ivpugem.c file of the Linux operating system’s NPU driver module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the rtw89_h2c_tx() function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system allows a hacker to induce a service failure.

The vulnerability of the rtw89h2ctx function in the drivers/net/wireless/realtek/rtw89/core.c file of the Realtek wireless adapter driver for the Linux operating system is related to the failure to release resources after their useful life has expired. Exploiting this vulnerability could allow an...

The vulnerability of the mddev_unlock() function in the drivers/md/md.c module of the Linux operating system’s kernel, which allows a hacker to cause service failure.

The vulnerability of the mddevunlock function in the drivers/md/md.c module of the Linux device driver for multiple devices such as RAID and LVM is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

ASUSTOR ADM 安全漏洞

ASUSTOR ADM is a dedicated operating system developed by ASUSTOR Technology ASUSTOR for all ASUSTOR NAS devices. Vulnerabilities exist in versions 4.1.0 to 4.3.3.ROF1, and from version 5.0.0 to 5.1.1.RCI1 of ASUSTOR ADM. These vulnerabilities stem from the DDNS update feature not correctly...