CVE-2026-44296: Uncontrolled Resource Consumption

Deskflow is a keyboard and mouse sharing app. Prior to 1.26.0.167, a remote, unauthenticated denial of service DoS vulnerability affects Deskflow servers running with TLS enabled the default. When any TCP peer connects to the listening port and its first bytes do not parse as a valid TLS...

SUSE CVE-2026-43224

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix sgtable leak on mapping failures In an unlikely case when iopopulateareadma fails, which could only happen on a PAGEPOOL32BITARCHWITH64BITDMA machine, iozcrxmaparea will have an initialised and not freed table. ...

CVE-2026-43224 io_uring/zcrx: fix sgtable leak on mapping failures

In the Linux kernel, the following vulnerability has been resolved: iouring/zcrx: fix sgtable leak on mapping failures In an unlikely case when iopopulateareadma fails, which could only happen on a PAGEPOOL32BITARCHWITH64BITDMA machine, iozcrxmaparea will have an initialised and not freed table. ...

Lyussfyuring002

lyussfyuring002 web exploitation + OSINT toolkit for people...

SUSE CVE-2026-31568

In the Linux kernel, the following vulnerability has been resolved: s390/mm: Add missing secure storage access fixups for donated memory There are special cases where secure storage access exceptions happen in a kernel context for pages that don't have the PGarch1 bit set. That bit is set for...

CVE-2026-29051 melange has Path Traversal via .PKGINFO in --persist-lint-results

melange allows users to build apk packages using declarative pipelines. Starting in version 0.32.0 and prior to version 0.43.4, melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and...

melange 路径遍历漏洞

Melange is a software developed by Chainguard for building APKs from source code. Versions of Melange from 0.32.0 to 0.43.4 had a path traversal vulnerability. This vulnerability stemmed from insufficient validation of the arch and pkgname parameters, allowing attackers to write arbitrary JSON...

melange has Path Traversal via .PKGINFO in --persist-lint-results

Impact melange lint --persist-lint-results opt-in flag, also usable via melange build --persist-lint-results constructs output file paths by joining --out-dir with the arch and pkgname values read from the .PKGINFO control file of the APK being linted. In affected versions these values were not...

Security update 5.1.3 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-lusitaniae-apacheexporter: Internal changes to fix build issues with no impact for customers spacecmd: Version 5.1.13-0 Updated translation strings venv-salt-minion: Security issues fixed: CVE-2026-31958: Security patch for Salt vendored...

SUSE-FU-2026:21232-1 Feature update for libgcrypt, libgpg-error

This update for libgcrypt, libgpg-error fixes the following issues: Update libgcrypt to 1.12.1 jscPED-15059: New and extended interfaces: - Allow access to the FIPS service indicator via the new GCRYCTLFIPSSERVICEINDICATOR control code. - Make SHA-1 non-FIPS internally for the 1.12 API - Add...

The vulnerability of the show_cpuinfo() function in the arch/um/kernel/um_arch.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the showcpuinfo function in the arch/um/kernel/umarch.c module of the Linux operating system is related to buffer overflows based on a stack. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20260408-73-0029

A vulnerability in the arch/arm/mach-tegra/reset.c component of the Linux operating system kernel is related to resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

ROS-20260407-73-0002

A vulnerability in the getpatinfo function of the arch/x86/mm/pat/memtype.c module of the x86 platform of the Linux operating system kernel is related to the disclosure of sensitive information. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

The vulnerability of the crc_t10dif_arch() function in the arch/arm/lib/crc-t10dif-glue.c file, which is part of the ARM platform support for the Linux operating system. This vulnerability allows a attacker to cause a service failure.

The vulnerability of the crct10difarch function in the arch/arm/lib/crc-t10dif-glue.c file, which is part of the ARM platform support for the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the crc_t10dif_arch() function in the arch/arm64/lib/crc-t10dif-glue.c module, which is part of the ARM 64-bit kernel support for the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the crct10difarch function in the arch/arm64/lib/crc-t10dif-glue.c file, which is part of the ARM 64-bit kernel support for the Linux operating system, is related to code errors. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `fw_getenv()` function in the `arch/mips/fw/lib/cmdline.c` module, which is part of the Linux operating system’s MIPS architecture support, allows a hacker to cause a service failure.

The vulnerability of the fwgetenv function in the arch/mips/fw/lib/cmdline.c file, which is part of the Linux operating system’s MIPS architecture support, involves the dereferencing of pointers. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the arch/loongarch/kernel/traps.c module of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the prepare_trampoline() function in the arch/arm64/net/bpf_jit_comp.c network support module on the ARM 64-bit kernel platform of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the preparetrampoline function in the arch/arm64/net/bpfjitcomp.c network support module on the ARM 64-bit kernel of the Linux operating system is related to the improper disabling or release of resources. Exploiting this vulnerability can allow an attacker to cause a service...

Exploit for Argument Injection in Phpmailer_Project Phpmailer

MediCare Portal Intentionally vulnerable healthcare patient...

The vulnerability of the chacha_crypt_arch() function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, allows a hacker to cause a service failure.

The vulnerability of the chachacryptarch function in the arch/s390/crypto/chacha-glue.c module, which is part of the S390 platform support in the Linux operating system, is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a...