CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion

When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...

CVE-2023-31014_Lab

Лаборатория перехвата неявных Intent CVE-2023-31014 Образовательная Android-лаборатория, созданная на основе публичного отчёта об уязвимости CVE-2023-31014 в NVIDIA GeForce NOW для Android. Не содержит исходный код NVIDIA, реальные строки Action и реальные учётные данные. Факты из публичного отчё...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc просто BSOD,используется для перезагрузки ОС;...

CVE-2026-68763

A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...

CVE-2023-31308

A malicious virtual function can invoke certain command handlers in the SMU , causing a denial of service due to an out-of-bounds memory read . Per AMD's CVSS 3.1 rating, the impact is LOW (3.3) with a local attack vector requiring low privileges and no user interaction, affecting only availabili...

CVE-2023-31308

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

EUVD-2023-60610

A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...

CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2026-14367

CVE-2026-14367 affects the Zephyr RTOS I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c. A statically-allocated work-node free-list (sys_slist_t) is accessed without synchronization: ISR-context callers invoke sys_slist_get() while the workqueue thread calls sys_slist_append(). This data race can...

EUVD-2026-68718

The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...

CVE-2026-62299

A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...

nodejs:24 security update

An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

RLSA-2026:61386 Important: nodejs:24 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...

CVE-2021-2471

CVE-2021-2471 - MySQL Connector/J의 XXE Oracle MySQL의 MySQL Connectors 제품구성 요소: Connector/J의 취약점입니다. 영향을 받는 지원 버전은 8.0.26 및 이전 버전입니다. 이 취약점을 성공적으로 악용하면 중요한 데이터에 대한 무단 액세스 또는 MySQL Connectors에서 액세스할 수 있는 모든 데이터에 대한 완전한 액세스가 가능해지고, MySQL Connectors를 정지시키거나 빈번하게 반복되는 충돌완전한 DoS을 유발하는 무단 기능을 수행할 수 있습니다...

BrotherVulnerabilities

Несколько устройств Brother: Множественные уязвимости Обзор Rapid7 провел исследовательский проект по поиску уязвимостей нулевого дня в многофункциональных принтерах MFP от Brother Industries, Ltd. В ходе исследования было обнаружено восемь новых уязвимостей. Некоторые или все из этих уязвимостей...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...