PT-2026-81364

Name of the Vulnerable Software and Affected Versions rclone versions 1.72.0 through 1.74.4 Description Multiple denial-of-service issues exist in the archive backend's SquashFS parser, which utilizes the github.com/diskfs/go-diskfs dependency. The parser does not validate attacker-controlled...

CVE-2026-79775: Improper Validation of Array Index

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

CVE-2026-79775: Improper Validation of Array Index

rclone versions = v1.72.0 and = v1.74.4 fixed in v1.75.0 contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency. The parser fails to validate attacker-controlled superblock and metadata values before...

ROS-20260825-73-0032

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the tdfxfb_checkvar() function in the drivers/video/fbdev/tdfxfb.c driver module of the Linux kernel’s frame buffer device driver allows a attacker to cause a service failure.

The vulnerability of the tdfxfbcheckvar function in the drivers/video/fbdev/tdfxfb.c driver for kernel-based frame buffer devices in the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

Linux Distros Unpatched Vulnerability : CVE-2026-71832

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Servi...

ROS-20260825-73-0036

The vulnerability in the kernel-lt is related to the swapping of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the dlfb_ops_check_var() function in the drivers/video/fbdev/udlfb.c module of the Linux kernel’s frame buffer device driver allows a attacker to cause a system failure.

The vulnerability of the dlfbopscheckvar function in the drivers/video/fbdev/udlfb.c module of the Linux kernel’s frame buffer device driver is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ets_offload_change() function in the net/sched/sch_ets.c module of the net/sched subsystem of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the etsoffloadchange function in the net/sched/schets.c module of the net/sched subsystem of the Linux operating system is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the rtsc_min() function in the net/sched/sch_hfsc.c module of the Linux operating system’s network/scheduling subsystem allows a attacker to cause a service failure.

The vulnerability of the rtscmin function in the net/sched/schhfsc.c module of the Linux operating system’s network/scheduling subsystem is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the lynxfb_ops_checkvar() function in the drivers/staging/sm750fb/sm750.c module, which supports additional hardware devices in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the lynxfbopscheckvar function in the drivers/staging/sm750fb/sm750.c module, which supports additional hardware devices in Linux operating systems, is related to zero-division errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

EulerOS Virtualization 2.13.1 : kernel (EulerOS-SA-2026-3176)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

EulerOS Virtualization 2.13.0 : kernel (EulerOS-SA-2026-3216)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

CVE-2026-71832

A flaw was found in Aria2. A remote malicious user can exploit a Divide By Zero vulnerability in the src/bittorrenthelper.cc component, leading to a Denial of Service DoS. Mitigation If Aria2 is deployed as a daemon with RPC enabled, restrict network access to the service. Configure firewall rule...

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

UBUNTU-CVE-2026-71832

Aria2 version 1.37.0 and below is affected by a Divide By Zero issue in src/bittorrenthelper.cc, which allows a remote malicious user to cause a Denial of Service...

CVE-2024-38856-ApacheOfBiz

CVE-2024-38856-ApacheOfBiz Apache OFBiz è un sistema open source di pianificazione delle risorse aziendali. Fornisce una suite di applicazioni aziendali che integrano e automatizzano molti dei processi aziendali di un'impresa. CVE-2024-38856 è una vulnerabilità di pre-autenticazione in Apache OFB...

CVE-2026-74645

A flaw was found in the Linux kernel's damonlrusort module. A local user with write permissions to module parameters can trigger a division-by-zero error by setting the activemembp parameter to a specific value. This manipulation causes the damosquotascore function to attempt division by zero,...

AliExpress caught using silent audio to fingerprint visitors’ browsers

AliExpress, the online marketplace owned by Alibaba Group, has come under scrutiny after researchers and browser maker Brave reported finding silent Web Audio processing on the site that could help fingerprint visitors’ devices. The audio processing did not record people through their microphones...