The vulnerability of the Linux operating system’s kernel cgroup component, which allows a hacker to cause a service failure

The vulnerability of the cgroup kernel component in the Linux operating system is related to the allocation of unlimited memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the fs/ocfs2 component in the Linux operating system, which allows a hacker to cause a service failure

The vulnerability of the fs/ocfs2 component in the Linux operating system is related to errors during the update of the link counters. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the acm_bind() function in the drivers/usb/gadget/function/f_acm.c file of the Linux kernel’s USB device driver allows a hacker to cause a service failure.

The vulnerability of the acmbind function in the drivers/usb/gadget/function/facm.c file of the Linux device driver framework is related to the assignment of the NULL pointer. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the development environment for UEFI applications under EDK2, related to integer overflow, allows attackers to compromise data integrity and cause service failures.

The vulnerability of the development environment for UEFI applications under EDK2 is related to a numerical overflow condition. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service failures...

The vulnerability in the `drivers/net/wireless/ath/ath12k/mac.c` component of the Linux operating system allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability in the drivers/net/wireless/ath/ath12k/mac.c component of the Linux operating system is related to the use of memory after it has been freed. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Huawei HarmonyOS Device Security Management Module Competitive Conditions Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS device security management module, which can be exploited by an attacker to cause...

Claude Used to Hack Mexican Government

An unknown hacker used Anthropic's LLM to hack the Mexican government: The unknown Claude user wrote Spanish-language prompts for the chatbot to act as an elite hacker, finding vulnerabilities in government networks, writing computer scripts to exploit them and determining ways to automate data...

The vulnerability of the dst_count_dec() function in the net/core/dst.c module, a support for network functions in the Linux kernel, allows a hacker to cause a service failure.

The vulnerability of the dstcountdec function in the net/core/dst.c module, part of the Linux kernel’s networking functions support, involves disclosing confidential information. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the hfi1_write_iter() function in the drivers/infiniband/hw/hfi1/file_ops.c file of the Linux operating system’s kernel driver allows a attacker to cause a service failure.

The vulnerability of the hfi1writeiter function in the drivers/infiniband/hw/hfi1/fileops.c file of the Linux kernel’s InfiniBand support driver is related to the use of a NULL pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the iso_listen_bis() function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem allows a attacker to cause a service failure.

The vulnerability of the isolistenbis function in the net/bluetooth/iso.c module of the Linux kernel’s Bluetooth subsystem is related to the improper disabling or release of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A competitive condition vulnerability exists in the Huawei HarmonyOS Printing Module, which can be exploited by an attacker to cause availability to be...

Huawei HarmonyOS 竞争条件问题漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A conditional contention vulnerability exists in the Huawei HarmonyOS security control, which can be exploited by an attacker to cause availability to be...

The vulnerabilities of the functions cifs_abort_connection() and generic_ip_connect() in the Linux operating system allow a hacker to cause a service failure.

The vulnerability of the cifsabortconnection and genericipconnect functions in the Linux kernel is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the sun50i_cpufreq_get_efuse() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the sun50icpufreqgetefuse function in the Linux operating system is related to reading data beyond the allowed range of memory. Exploiting this vulnerability can allow an attacker to cause a system failure...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A conditional contention vulnerability exists in the Huawei HarmonyOS privilege management service, which can be exploited by an attacker to cause availabili...

CVE-2026-20068

Multiple Cisco products are affected by a vulnerability in the Snort 3 detection engine that could allow an unauthenticated, remote attacker to cause the Snort 3 Detection Engine to restart, resulting in an interruption of packet inspection. This vulnerability is due to incomplete error checking...

Inside Tycoon2FA: How a leading AiTM phishing kit operated at scale

In this article 1. Operational overview of Tycoon2FA 2. Mitigation and protection guidance 3. Microsoft Defender detections Following its emergence in August 2023, Tycoon2FA rapidly became one of the most widespread phishing-as-a-service PhaaS platforms, enabling campaigns responsible for tens of...

CVE-2026-1674

The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to unauthorized modification of data due to missing authorization within the savegutenaformsschema function in all versions up to, and including, 1.6.0. This makes...

The vulnerability of the ath9k_hif_usb_rx_stream() function in the drivers/net/wireless/ath/ath9k/hif_usb.c file of the Atheros/Qualcomm wireless communication adapter driver for the Linux operating system allows a malicious actor to cause a service failure remotely.

The vulnerability of the ath9khifusbrxstream function in the drivers/net/wireless/ath/ath9k/hifusb.c module of the Atheros/Qualcomm wireless communication adapter driver in the Linux operating system is related to the failure to release resources after their useful life has ended. Exploiting this...

Labkotec LID-3300IP

RISK EVALUATION Successful exploitation of this vulnerability could allow attackers to gain unauthorized control over system operations, leading to disruption of normal functionality and potential safety hazards. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize...