CVE-2026-105746

The Docling library (versions 2.83.0 through 2.131.0 ) contains a vulnerability where the KServeV2OcrModel class fails to enforce the enable_remote_services policy. Specifically, the docling/models/stages/ocr/kserve_v2_ocr_model.py file sends page images to configured endpoints without checking i...

CVE-2024-23897

usage python3 exp.py...

ROS-20260930-73-0091

The vulnerability of the sfbdequeue function in the net/sched/schsfb.c module of the Linux operating system’s network/scheduling subsystem is related to pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the HAProxyMessage.readNextTLV() function in the framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause a service failure.

The vulnerability of the HAProxyMessage.readNextTLV function in the framework for developing network applications, servers, and clients using the Netty protocol is related to improper handling of exceptional states. Exploiting this vulnerability can allow an attacker to cause service interruption...

The vulnerability of the HAProxy PROXY v2 framework for developing network applications, servers, and clients using the Netty protocol allows a attacker to cause service interruptions.

The vulnerability of the HAProxy PROXY v2 framework for developing network applications, servers, and Netty-based clients relates to improper syntax validation during input processing. Exploiting this vulnerability allows an attacker to cause service interruptions remotely...

The vulnerability of PostgreSQL PgBouncer’s connection pool software lies in the execution of an infinite loop when a condition for exiting the loop is not met. This allows a hacker to cause a service failure.

The vulnerability of the PostgreSQL PgBouncer connection pool software lies in the execution of a loop with an unreachable exit condition „Infinite loop“ due to a numerical overflow. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the SCRAM (Salted Challenge Response Authentication Mechanism) mechanism in the PostgreSQL PgBouncer connection pool allows a attacker to induce a service failure.

The vulnerability of the SCRAM Salted Challenge Response Authentication Mechanism mechanism in the PostgreSQL PgBouncer connection pool lies in the dereferencing of pointers due to the lack of validation for a required attribute in the end-message parser. Exploiting this vulnerability allows a...

ROS-20260924-73-0043

The vulnerability of the svcdefer function in the net/sunrpc/svcxprt.c module of the Linux operating system’s RPC protocol implementation is related to the repeated release of previously released memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

ROS-20260923-73-0016

The vulnerability of the decodechooseargs function in the net/ceph/osdmap.c module, which is responsible for implementing networking functions of the Linux kernel, is related to an uncontrolled and exploitable condition. Exploiting this vulnerability could allow a malicious actor to cause service...

ROS-20260923-73-0043

The vulnerability of the net/sched component in the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Astra Linux – Vulnerability in libxstream-java

XStream is a Java library for serializing objects to XML and back again. Before version 1.4.16, XStream had a vulnerability that could allow a remote attacker to allocate 100% of the CPU resources on the target system, depending on the CPU type or the parallel execution of certain payloads. This...

CVE-2026-53965

creationtimestamp| type| source ---|---|--- 2026-08-19 08:01:24+00:00| seen| https://gist.github.com/FR-Flo/a82f37135301a238c85c6769b4acc044 2026-08-19 08:25:35+00:00| seen| https://gist.github.com/FR-Flo/a3cc74f208df80c1d7f4b5b3e98e4f77 2026-08-19 13:18:57+00:00| seen|...

ROS-20260817-73-0025

The vulnerability in dotnet9.0 is related to incorrect validation of the specified data type. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ROS-20260817-73-0023

The vulnerabilities of.NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

CVE-2026-62893

creationtimestamp| type| source ---|---|--- 2026-08-11 18:40:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstbadnmuk25 2026-08-11 19:00:38+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:38+00:00| seen|...

ROS-20260810-73-0010

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

ROS-20260810-73-0008

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the postMessage component in the Firefox web browser and Thunderbird email client, which allows a hacker to trigger a service failure.

The vulnerability of the postMessage component in the Firefox web browser and the Thunderbird email client is related to the。 Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

ROS-20260810-73-0012

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...

ROS-20260810-73-0011

The vulnerability of the Networking component of the Oracle Java SE software platform, as well as of the Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition virtual machines, is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to...