Security Bulletin:Jackson-Databind Denial-of-Service Vulnerability in Versions 2.13.0 to 2.14.0

Summary jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.13.0 until 2.14.0, a potential Denial-of-Service exists when attacker sends deeply nested JSON if and only if the service reads deeply nested 1000s of levels JSON as...

CVE-2026-77050

A flaw was found in Django. A remote, unauthenticated attacker could cause a Denial of Service DoS by submitting requests containing numerous distinct, excessively long language codes. Because Django's translation component caches these codes in memory without length restrictions, continuous...

CVE-2023-31747

Exploit Title: Wondershare Filmora 12.2.9.2233 - Unquoted Service Path CVE-2023-31747 Date: 2023/04/23 Exploit Author: msd0pe Vendor Homepage: https://www.wondershare.com My Github: https://github.com/msd0pe-1 Wondershare Filmora: Versions = wmic service get name,pathname,displayname,startmode |...

CVE-2026-88252 Sssd: sssd: denial of service via responder connection retry loop during file descriptor exhaustion

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

EUVD-2026-93558

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

CVE-2026-88252

A Denial of Service (DoS) vulnerability exists in sssd where a local user can exhaust the responder service's available file descriptors . By maintaining numerous concurrent connections to a responder socket and queuing new attempts, an attacker triggers an unthrottled retry loop . This results i...

CVE-2026-88252

A flaw was found in sssd. A local user can cause a Denial of Service DoS by exhausting the responder service's available file descriptors system handles used for open connections. By opening and maintaining many concurrent connections to a responder socket while continuing to queue new connection...

CVE-2026-106115

The ImageSharp 2D graphics library (versions 2.1.0 through 4.1.2 ) is vulnerable to an out-of-bounds write in the TIFF CCITT Group 4 encoder . The root cause is that T6BitCompressor.CompressStrip can emit encoded row data and end-of-facsimile-block codes exceeding the buffer size allocated by Wid...

CVE-2026-106115 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

CVE-2026-106115 ImageSharp: TIFF CCITT T6 encoder writes beyond an undersized output buffer

ImageSharp is a 2D graphics library. From 2.1.0 until 4.1.2, the TIFF CCITT Group 4 encoder allocates Width times rowsPerStrip bytes even though T6BitCompressor.CompressStrip can emit encoded row data and two 12-bit end-of-facsimile-block codes beyond that capacity. TiffCcittCompressor.WriteCode...

CVE-2026-90559

A flaw was found in snappy-java. This out-of-bounds write vulnerability occurs in the Snappy.uncompress function when the destination buffer's capacity is not validated against the decompressed size. A remote attacker can supply valid compressed data that, when decompressed, exceeds the buffer's...

CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-80898

A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...

CVE-2026-80727

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...

sockstress

sockstress Sockstress CVE-2008-4609 implementation using Go Install go get github.com/marcelki/sockstress Usage Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1ns,...

CVE-2026-89894

A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...

CVE-2026-89777

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

CVE-2026-90111

A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2026-90008

A flaw was found in the Linux kernel's megaraidsas component. The megasasmakeprpnvme function, which constructs a list of memory pages for data transfers, fails to verify the allocated buffer's boundaries. This can result in a buffer overrun, potentially leading to a system crash Denial of Servic...