Silicon Labs Gecko SDK和Silicon Labs Simplicity SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK and Silicon Labs Simplicity SDK are both open-source products from Silicon Labs. The Silicon Labs Gecko SDK is a library that combines the Silicon Labs wireless software development kit SDK with the Gecko platform into an integrated software package. The Silicon La...

The vulnerability of the Intel Trust Domain Extensions (TDX) microprogramming software for Intel processors allows a hacker to trigger a service failure.

The vulnerability of the Intel Trust Domain Extensions TDX microprogramming software for Intel processors is related to synchronization errors when using common resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the internal locking mechanism of the MongoDB database management system allows a hacker to trigger a service failure.

The vulnerability of the internal locking mechanism of the MongoDB database management system is related to the locking mechanism with unlimited external access. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerabilities of the React frontend building libraries React-server-dom-parcel, React-server-dom-turbopack, and React-server-dom-webpack allow attackers to cause service failures.

The vulnerability of the React frontend library packages react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack involves uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

Inside Modern API Attacks: What We Learn from the 2026 API ThreatStats Report

API security has been a growing concern for years. However, while it was always seen as important, it often came second to application security or hardening infrastructure. In 2025, the picture changed. Wallarm’s 2026 API ThreatStats Report revealed that APIs are now the primary attack surface fo...

The vulnerability of the MongoDB Query Planner component of the MongoDB database engine allows a hacker to cause a service failure.

The vulnerability of the MongoDB Query Planner component in the MongoDB database lies in its unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of NVIDIA’s graphics driver series—NVS, Quadro, NVIDIA RTX, GeForce—is related to pointer aliasing, which allows attackers to trigger service failures.

The vulnerabilities of NVIDIA’s graphics driver families—NVS, Quadro, NVIDIA RTX, GeForce—are related to pointer manipulation. Exploiting these vulnerabilities can allow attackers to trigger service failures...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the cpswnew driver not executing the ndosetrxmode callback in the work queue, potentially leading...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to execute the ndosetrxmode callback in the work queue, potentially leading to...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the osdfault function not resetting the sparse read state. This could lead to state machine error...

The vulnerability in the implementation of the LDAP service protocol on the Windows operating system allows a hacker to induce a service failure.

The vulnerability of the LDAP Lightweight Directory Access Protocol implementation in the Windows operating system is related to pointer aliasing. Exploiting this vulnerability can allow a malicious actor to cause service failures...

The vulnerability of the expand() function in the juliangruber/brace-expansion library of the Node.js software platform allows a malicious actor to cause a service failure.

The vulnerability of the expand function in the juliangruber/brace-expansion library of the Node.js software platform is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the JSON data processing library Json-smart, related to uncontrolled recursion, allows attackers to trigger a service failure.

The vulnerability of the JSON data processing library Json-smart is related to uncontrolled recursion. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the toFixed() function in the JavaScript environment of Rhino allows a malicious actor to cause a service failure.

The vulnerability of the toFixed function in the JavaScript environment of Rhino is related to uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the `ntfs_read inode_mount()` function in the `fs/ntfs/inode.c` file of the Linux kernel file system allows a hacker to cause a service failure.

The vulnerability of the ntfsread inodemount function in the fs/ntfs/inode.c file of the Linux kernel file system is related to the distribution of resources without any restrictions or regulations. Exploiting this vulnerability could allow a attacker to cause service failures...

Silicon Labs Simplicity SDK 安全漏洞

Silicon Labs Simplicity SDK is a core software development kit provided by Silicon Labs, Inc. in the United States. The Silicon Labs Simplicity SDK has a security vulnerability. This vulnerability arises from truncated 802.15.4 packet data, which may lead to assertion failures and potentially cau...

The vulnerability of the rcu_read_unlock_special() function in the kernel/rcu/tree_plugin.h module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the rcureadunlockspecial function in the kernel/rcu/treeplugin.h module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the init() and fini() functions in the drivers/char/virtio_console.c module of the Linux kernel driver support for alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the init and fini functions in the drivers/char/virtioconsole.c driver module, which supports alphanumeric devices in Linux kernels, relates to the exposure of information through event log files. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the blkcg_activate_policy() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the blkcgactivatepolicy function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the sc16is7xx_probe() function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to cause a service failure.

The vulnerability of the sc16is7xxprobe function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...