Pillow: Pillow: Native heap out-of-bounds write

A flaw was found in Pillow prior to 12.3.0. The public RankFilter API can trigger a native heap out-of-bounds write when given a very large odd filter size. ImageFilter.RankFilter.filter calls image.expandsize // 2, size // 2 before rank-filter size validation, and ImagingExpand computes output...

python-pillow: Pillow: Denial of Service via crafted GD 2.x image file

A flaw was found in Pillow, a Python imaging library. A remote attacker could exploit this vulnerability by providing a specially crafted GD 2.x image file. The GdImageFile.open function reads image dimensions without proper validation, leading to excessive memory allocation. This can result in a...

daphne: daphne: Denial of Service via excessive WebSocket message size

A flaw was found in daphne. An unauthenticated remote attacker could exploit this vulnerability by sending arbitrarily large WebSocket messages or frames. This oversight in payload size handling can lead to excessive memory consumption, resulting in a denial of service DoS for the affected system...

github.com/quic-go/quic-go: quic-go: Denial of Service via excessive memory allocation in HTTP/3 trailers

A flaw was found in quic-go, an implementation of the QUIC protocol in Go. A remote attacker can exploit this by sending specially crafted HTTP/3 trailer fields. This can cause the system to allocate excessive memory, leading to a denial-of-service DoS condition where the affected server or clien...

EUVD-2026-52851

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated framecontentsize field in the frame header. Attackers can store a base64-encode...

CVE-2026-69702

SnailJob 1.7.0 is affected by a denial-of-service vulnerability in FuryUtil.deserialize. A crafted Zstandard payload with an inflated frame_content_size can trigger an unbounded array allocation, causing an unrecoverable java.lang.OutOfMemoryError when a retry task is dispatched. Attack requires ...

EUVD-2026-52818

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47623

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47623

NVIDIA Dynamo for Linux contains a deserialization of untrusted data vulnerability (CVE-2026-47623) that could lead to denial of service and data tampering. Affected: NVIDIA Dynamo on Linux, prior to version 1.2.0. Remediation: update to v1.2.0 as listed in the NVIDIA security updates; vulnerabil...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a race condition in the LoRA manager singleton initialization (CVE-2026-47621). The issue affects the LoRA manager component and can lead to denial of service and data tampering. The provided materials specify a CVSS 3.1 base score of 6.5 (Medium) with network att...

EUVD-2026-52816

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47621

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to denial of service and data tampering...

CVE-2026-47620

CVE-2026-47620 affects NVIDIA Dynamo for Linux. The issue is a race condition in the LoRA manager singleton initialization, which could allow data tampering and denial of service. The CVSSv3.1 base score is 6.5 (Medium) with Network attack vector, high attack complexity, no privileges required, n...

EUVD-2026-52815

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2026-47620

NVIDIA Dynamo for Linux contains a vulnerability where an attacker could cause a race condition in the LoRA manager singleton initialization. A successful exploit of this vulnerability might lead to data tampering and denial of service...

EUVD-2026-52814

NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-47619

NVIDIA Dynamo for Linux examples and recipes contain a vulnerability where an attacker could cause a system failure. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-47619

NVIDIA Dynamo for Linux: CVE-2026-47619 affects the Linux Dynamo examples and recipes component, potentially causing system failure with possible code execution, data tampering, denial of service, and information disclosure. The NVIDIA bulletin confirms this CVE and lists affected updates: to rem...

CVE-2026-37462

A flaw was found in gobgp. An integer underflow vulnerability in the BGPUpdate.DecodeFromBytes function allows a remote attacker to cause a Denial of Service DoS by sending a specially crafted BGP Border Gateway Protocol UPDATE message. This can disrupt network operations and make the affected...

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

The commercial phishing-as-a-service PhaaS toolkit known as Greatness has become the latest crimeware solution to add support for device code phishing, a rapidly growing cyber threat that abuses the legitimate OAuth 2.0 Device Authorization Grant to bypass Multi-Factor Authentication MFA and seiz...