The vulnerability of the Avahi service detection system in local networks, related to uncontrolled recursion, allows a hacker to trigger a service failure.

The vulnerability of the Avahi service detection system in local networks is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-35667 OpenClaw < 2026.3.24 - Improper Process Termination via Unpatched killProcessTree in shell-utils.ts

OpenClaw before 2026.3.24 contains an incomplete fix for CVE-2026-27486 where the !stop chat command uses an unpatched killProcessTree function from shell-utils.ts that sends SIGKILL immediately without graceful SIGTERM shutdown. Attackers can trigger process termination via the !stop command,...

The vulnerability of the memory management subsystem mm/mseal in Linux operating systems allows a hacker to trigger a service failure.

The vulnerability of the memory management subsystem mm/mseal in Linux operating systems is related to incorrect calculations. Exploiting this vulnerability can allow attackers to cause system failures...

The vulnerability of the LibSoup library for HTTP servers stems from deficiencies in HTTP request processing, allowing attackers to induce service failures.

The vulnerability of the HTTP server-based LibSoup library is related to deficiencies in HTTP request processing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

GHSA-3J8V-CGW4-2G6Q fast-jwt: Stateful RegExp (/g or /y) causes non-deterministic allowed-claim validation (logical DoS)

Impact Using certain modifiers on RegExp objects in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options in verify functions can cause certain unintended behaviours. This is because some modifiers are stateful and will cause failures in every second verification attempt...

Incorrect Regular Expression

Overview fast-jwt is a Fast JSON Web Token implementation Affected versions of this package are vulnerable to Incorrect Regular Expression in the allowedAud, allowedIss, allowedSub, allowedJti, or allowedNonce options when used with RegExp objects and RegExp is configured with modifiers such as /...

The vulnerability of the Git-based software platform for collaborative code development on GitLab EE/CE arises from incorrect input of configuration data, allowing a perpetrator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development in GitLab EE/CE relates to incorrect input of configuration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the ksmbd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the ksmbd component in the Linux operating system’s kernel is related to improper handling of the absence of a specific element. Exploiting this vulnerability can allow an attacker to cause service failures...

The software for deploying and executing AI models in NVIDIA Triton Inference Server is vulnerable due to incorrect conversion of numerical value types. This vulnerability allows attackers to trigger service failures.

The vulnerability of NVIDIA Triton Inference Server’s deployment and AI model execution software is related to incorrect conversion of numerical value types. Exploiting this vulnerability can allow a remote attacker to cause service failures...

CVE-2025-14243

A flaw was found in the OpenShift Mirror Registry. This vulnerability allows an unauthenticated, remote attacker to enumerate valid usernames and email addresses via different error messages during authentication failures and account creation...

Rack::Session::Cookie secrets: decrypt failure fallback enables secretless session forgery and Marshal deserialization

Rack::Session::Cookie incorrectly handles decryption failures when configured with secrets:. If cookie decryption fails, the implementation falls back to a default decoder instead of rejecting the cookie. This allows an unauthenticated attacker to supply a crafted session cookie that is accepted ...

The vulnerability of the Node.js software platform, related to improper cleaning or release of resources, allows a perpetrator to trigger a service failure.

The vulnerability of the Node.js software platform is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability in the Telemetry component of Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Telemetry component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to trigger a service failure.

The vulnerability of the Canvas2D component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient testing for unusual or exceptional states. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to errors in processing input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the GNU Binutils development tool, related to reading beyond the buffer boundaries in memory, allows an attacker to disclose protected information or cause system failures.

The vulnerability of the GNU Binutils development tool lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information or cause system failures...

SUSE: Security Advisory (SUSE-SU-2026:1170-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Next.js software platform for creating web applications, related to unlimited resource distribution, allows attackers to trigger service failures.

The vulnerability of the Next.js software platform for creating web applications is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The Hack That Exposed Syria’s Sweeping Security Failures

When Syrian government accounts were hijacked in March, the breach looked chaotic. But it revealed something more troubling: a state struggling with the most basic layer of cybersecurity...

The vulnerability of the unix_stream_sendpage() function in the net/unix/af_unix.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the unixstreamsendpage function in the net/unix/afunix.c module, which is part of the Linux kernel’s networking functions, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...