Information Disclosure

github.com/authzed/spicedb is vulnerable to Information Disclosure. The vulnerability is due to the exclusion operator in the authorization schema, where a large payload can cause the WriteRelationships call to fail silently, and incorrect permission check results are returned, allowing attackers...

The vulnerability of the r871xu_drv_init() function in the drivers/staging/rtl8712/usb_intf.c module, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the r871xudrvinit function in the drivers/staging/rtl8712/usbintf.c module, which supports additional devices in the Linux operating system, is related to improper initialization. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the build_sit_entries() function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows a attacker to cause a service failure.

The vulnerability of the buildsitentries function in the fs/f2fs/segment.c module of the F2FS file system support in Linux kernel allows for the exploitation of resources without any restrictions or regulation. Exploiting this vulnerability can enable a hacker to cause service failures...

The vulnerabilities of the functions p9_conn Cancel() and p9_read_work() in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allow a hacker to cause a service failure.

The vulnerabilities of the functions p9conn Cancel and p9readwork in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system are related to the distribution of resources without any restrictions or regulations. Exploiting these vulnerabilities could allow a...

The vulnerability of the snd_usbmidiOutputOpen() function in the sound/usb/midi.c module of Linux’s USB audio device support allows a hacker to cause a service failure.

The vulnerability of the sndusbmidioutputopen function in the sound/usb/midi.c module, which is part of Linux’s USB audio device support, involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a hacker to cause service failures...

GHSA-7FCC-CW49-XM78 OpenClaw has command injection via Windows shell fallback in Lobster tool execution

Summary The Lobster extension tool execution path used a Windows shell fallback shell: true after spawn failures EINVAL/ENOENT. In that fallback path, shell metacharacters in command arguments can be interpreted by the shell, enabling command injection. Affected Packages / Versions - Package:...

PT-2026-26235

Summary On Windows, the Lobster extension previously retried certain spawn failures ENOENT/EINVAL with shell: true for wrapper compatibility. In that fallback path, tool-provided arguments could be interpreted by cmd.exe if fallback was triggered. Affected Packages / Versions - Package: openclaw...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checks, which allows for out-of-bound writes, potentially leading to remote privilege escalation...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a series of chips developed by MediaTek Corporation in China. The MediaTek Chipsets contain security vulnerabilities; these vulnerabilities stem from the lack of boundary checks, which allows for out-of-bound writes, potentially leading to local privilege escalation...

The vulnerability of the microprogrammed software of the NovelSat NS2000 and NS3000 satellite demodulators lies in the lack of authentication for critical functions. This allows a hacker to alter user passwords or cause service failures.

The vulnerability of the microprogrammed satellite demodulators NovelSat NS2000 and NS3000 lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow a malicious actor to alter user passwords or cause service failures...

5 IoT Vulnerabilities That Stop Projects and How to Avoid Them

Stop the 75% failure rate. Learn which device vulnerabilities stall deployments and the exact fixes that get IoT projects to production...

OESA-2026-1438 wpa_supplicant security update

wpasupplicant is a WPA Supplicant for Linux, BSD, Mac OS X, and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. It is suitable for both desktop/laptop computers and embedded systems. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key...

The vulnerability of the MacOS operating system, related to uncontrolled resource consumption, allows a perpetrator to trigger a service failure.

The vulnerability of the MacOS operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service failures...

The vulnerability of the raid1_read_request() function in the drivers/md/raid1.c module of the Linux kernel support for multiple devices (RAID and LVM) allows a hacker to cause a service failure.

The vulnerability of the raid1readrequest function in the drivers/md/raid1.c module of the Linux kernel’s device drivers for RAID and LVM systems is related to improper control of resource identifiers “resource injection”. Exploiting this vulnerability could allow an attacker to cause service...

The vulnerability of the dbMount() function in the fs/jfs/jfs_dmap.c file of the Linux kernel’s JFS file system allows a attacker to access protected information or cause service failures.

The vulnerability of the dbMount function in the fs/jfs/jfsdmap.c file of the Linux kernel’s JFS file system is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to access protected information or cause service failures...

The vulnerability of the device_init_td0_ring() function in the drivers/staging/vt6655/device_main.c file, which supports additional devices in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the deviceinittd0ring function in the drivers/staging/vt6655/devicemain.c file, which supports additional devices in the Linux operating system, is related to improper memory release. Exploiting this vulnerability could allow a remote attacker to cause service failures...

GHSA-2GQ3-WW97-WFJM ImageMagick has a possible heap Use After Free vulnerability in its meta coder

A heap Use After Free vulnerability exists in the meta coder when an allocation fails and a single byte is written to a stale pointer. ==535852==ERROR: AddressSanitizer: heap-use-after-free on address 0x5210000088ff at pc 0x5581bacac14d bp 0x7ffdf667edf0 sp 0x7ffdf667ede0 WRITE of size 1 at...

DEBIAN-CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

CVE-2026-26283

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a continue statement in the JPEG extent binary search loop in the jpeg encoder causes an infinite loop when writing persistently fails. An attacker can trigger ...

CVE-2025-65995

When a DAG failed during parsing, Airflow’s error-reporting in the UI could include the full kwargs passed to the operators. If those kwargs contained sensitive values such as secrets, they might be exposed in the UI tracebacks to authenticated users who had permission to view that DAG. The issue...