Linux kernel DMA Engine Heap Buffer Overflow DoS

The vulnerability of the ptissuepending function in the drivers/dma/ptdma/ptdma-dmaengine.c file of the Linux kernel’s DMA driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

KLA91163 Multiple vulnerabilities in Mozilla Firefox ESR

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of service...

ROS-20260720-73-0017

The vulnerability of the Accessibility component in Google Chrome browser relates to memory overflow outside the bounds of the program. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...

ROS-20260717-73-0028

The vulnerability of the Metrics component in Google Chrome browser relates to the issue of operations going beyond the buffer in memory when processing HTML content. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

ROS-20260716-73-0069

The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause damage to the stack by using a specially created HTML page...

Windows WLAN Host system Data Compromise

The vulnerability of the Windows WLAN Host microprogramming software in embedded Qualcomm devices is caused by buffer overflows in the stack. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Qualcomm Embedded Software Array Indexing

The vulnerability of embedded Qualcomm software lies in improper array indexing. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

Audio/Video Component Compromise Data Compromise

The vulnerability of the Audio/Video component: The playback functions of Firefox and Firefox ESR browsers, as well as the Thunderbird email client, are vulnerable due to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow an attacker to compromise the...

Wavlink WL-WN579X3-C Router Sub_40139C Function

The vulnerability of the sub40139C function in the /cgi-bin/firewall.cgi script of the Wavlink WL-WN579X3-C router’s microprogramming system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Linux kernel Bluetooth L2CAP Buffer Overflow DoS

The vulnerability of the l2capdatachannel function in the net/bluetooth/l2capcore.c module of the Linux kernel’s Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

ROS-20260713-73-0023

The vulnerability of the Aggregate Term Handler component in the SQLite database management system is related to numerical truncation errors. Exploiting this vulnerability could allow an attacker to compromise privacy, integrity, and accessibility of the data...

Linux primehandle_to_fd Buffer Overflow DoS

The vulnerability of the primehandletofd function in the ivpu component of the Linux operating system’s kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

Enterprise Infrastructure Security Component Data Compromise

The vulnerability of the Enterprise Infrastructure Security component of the JD Edwards EnterpriseOne Tools system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected...

Webdav_Upload_File D-Link DNS-120

The vulnerability of the WebdavUploadFile function in the /cgi-bin/webdavmgr.cgi script of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and...

D-Link DNS-120 Local_Backup_Info Buffer Overflow

The vulnerability of the LocalBackupInfo function in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices is related to buffer...

D-Link DNS-120 CGI Set Wto Buffer Overflow

The vulnerability of the cgisetwto function in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 devices is related to errors in privile...

Exim Mail Server Resource Initialization Data Compromise

The vulnerability of the Exim mail server is related to the lack of initialization of resources. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of the protected information...

Oracle E-Business Suite 12.2.14 Vulnerability Detection Scanner

This is a scanner designed to assess Oracle E-Business Suite web environments affected by CVE-2025-61882. It performs basic connectivity checks, fingerprints Oracle EBS-specific paths such as /OAHTML/ endpoints, and verifies the accessibility of common application endpoints without sending...

RedWing MaaS Packages Android Bank Fraud as a Telegram Rental Service

A new Android malware operation called RedWing is being rented out on Telegram as a ready-made bank-fraud service. It lets even low-skill criminals take over a victim's phone, steal their banking logins, and capture the one-time codes that protect their accounts. Zimperium's zLabs, which found th...

wagtail-all-in-one-accessibility (>=2.0.0, <=2.1.0) potentially affected by CVE-2026-25517 via wagtail (7.1.0)

wagtail PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on wagtail and may be impacted: - wagtail-all-in-one-accessibility =2.0.0, =2.1.0 Source cves: CVE-2026-25517 Source advisory: OSV:PYSEC-2026-2030...