42110 matches found
CVE-2026-24826
Out-of-bounds Write, Divide By Zero, NULL Pointer Dereference, Use of Uninitialized Resource, Out-of-bounds Read, Reachable Assertion vulnerability in cadaver turso3d.This issue affects...
CVE-2025-29867
creationtimestamp| type| source ---|---|--- 2026-01-28 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-26-047/...
Exploit for CVE-2026-23829
🎯 CTT-Mailpit-Exploit: Perfect 11/10 Score Zero-Click Worm Tran...
WordPress Bitcoin Donate Button plugin <= 1.0 - Cross-Site Request Forgery to Settings Update vulnerability
Cross-Site Request Forgery to Settings Update vulnerability discovered by Muhammad Nur Ibnu Hubab Ibnu - Pondok Teknologi in WordPress Plugin Bitcoin Donate Button versions = 1.0...
kernel: Linux kernel: Information disclosure and denial of service in ntb_hw_switchtec module
A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntbhwswitchtec module. This vulnerability arises when the ntbmwcleartrans application programming interface API processes zero values for address and size, leading to an invalid memory...
kernel: Linux kernel: Information disclosure and denial of service in ntb_hw_switchtec module
A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntbhwswitchtec module. This vulnerability arises when the ntbmwcleartrans application programming interface API processes zero values for address and size, leading to an invalid memory...
GHSA-GF2C-JWCJ-X929 vlt Mishandles Path Sanitization for tar
vlt before 1.0.0-rc.10 mishandles path sanitization for tar, leading to path traversal during extraction...
kernel: Linux kernel: Information disclosure and denial of service in ntb_hw_switchtec module
A flaw was found in the Linux kernel. A local user could exploit a shift-out-of-bounds vulnerability within the ntbhwswitchtec module. This vulnerability arises when the ntbmwcleartrans application programming interface API processes zero values for address and size, leading to an invalid memory...
EUVD-2026-4910
The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...
CVE-2026-24785
Clatter is a nostd compatible, pure Rust implementation of the Noise protocol framework with post-quantum support. Versiosn prior to2.2.0 have a protocol compliance vulnerability. The library allowed post-quantum handshake patterns that violated the PSK validity rule Noise Protocol Framework...
[slackware-security] mozilla-thunderbird
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-140.7.1esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...
CVE-2025-71004
A segmentation violation in the oneflow.logicalor component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2026-5148
A GPU device-ID validation flaw in the flow.cuda.get device capability component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted device ID...
EUVD-2025-206483
A division-by-zero vulnerability in the flow.floordivide component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input tensor with zero...
PT-2026-5213
Name of the Vulnerable Software and Affected Versions OneFlow version 0.9.0 Description An input validation issue exists in the flow.arange component. This can be exploited to cause a Denial of Service DoS by providing a specially crafted input. Recommendations Update to a newer version that...
CVE-2025-65887
A division-by-zero vulnerability in the flow.floordivide component of OneFlow v0.9.0 allows attackers to cause a Denial of Service DoS via a crafted input tensor with zero...
PT-2026-5123
Microsoft has issued an emergency patch for a zero-day vulnerability CVE-2021-21509 in Office, allowing attackers to bypass OLE mitigations and execute malware. CISA has included the flaw in their KEV catalog. Microsoft Office SecurityPatch ZeroDayVulnerability https://t.co/WMeToNOuIK...
DNN Cross-Site Scripting Vulnerabilities
DNN also known as DotNetNuke is an open-source content management system CMS developed by the American company DNN, supported by Microsoft and based on the ASP.NET platform. This system features easy installation, scalability, and rich functionality. Versions of DNN prior to 9.13.10 and 10.2.0...