The vulnerability of the WPE WebKit and WebKitGTK page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation USA. A security vulnerability exists in Oracle Communications Order and Service Management versions 7.4.0, 7.4.1, and 7.5.0 of Oracle Communications Applications, which...

CyberAv3ngers: The Iranian Saboteurs Hacking Water and Gas Systems Worldwide

Despite their hacktivist front, CyberAv3ngers is a rare state-sponsored hacker group bent on putting industrial infrastructure at risk—and has already caused global disruption...

The vulnerability of the neigh_forced_gc() function in the net/core/neighbour.c module of the Linux kernel’s networking functions allows a hacker to cause a service failure.

The vulnerability of the neighforcedgc function in the net/core/neighbour.c module, which is part of Linux’s kernel-based networking functions, is related to buffer overflows based on a stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability in the definition of the structure rtl_vnd{} in the module drivers/bluetooth/hci_h5.c – the driver for supporting Bluetooth devices in the Linux operating system – allows a attacker to compromise the confidentiality and accessibility of the protected information.

The vulnerability in determining the structure of the rtlvnd module in the drivers/bluetooth/hcih5.c file – the driver for supporting Bluetooth devices in Linux operating systems – involves reading beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to gain access ...

The vulnerability of the bt_sock_recvmsg() function in the net/bluetooth/af_bluetooth.c module of the Linux Bluetooth subsystem allows a hacker to cause a service failure.

The vulnerability of the btsockrecvmsg function in the net/bluetooth/afbluetooth.c module of the Linux Bluetooth subsystem is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow a remote attacker to cause service failures...

The vulnerability of the sched_ext component of the pick_task_scx function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the schedext component in the picktaskscx function of the Linux operating system is related to mutual blocking of execution threads. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the ufshcd_exec_dev_cmd() function in the drivers/scsi/ufs/ufshcd.c module – This driver provides support for SCSI devices in the Linux operating system. It can be exploited by attackers to cause service failures.

Vulnerability of the ufshcdexecdevcmd function in the drivers/scsi/ufs/ufshcd.c module – The Linux kernel’s SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

Vulnerability of the qlcnic_83xx_add_rings() function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic_83xx_hw.c module – A driver for supporting QLogic Ethernet network adapters in Linux kernels, which allows a hacker to cause service failure.

Vulnerability of the qlcnic83xxaddrings function in the drivers/net/ethernet/qlogic/qlcnic/qlcnic83xxhw.c module – The Linux operating system’s Ethernet adapter support driver is vulnerable due to a reliance on the NULL pointer pointer. Exploiting this vulnerability could allow an attacker to cau...

The vulnerability of the tagged_addr_ctrl_get() function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, allows a hacker to gain access to protected information or cause a service failure.

The vulnerability of the taggedaddrctrlget function in the arch/arm64/kernel/ptrace.c module, which is part of the ARM 64-bit kernel support for the Linux operating system, relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to...

The vulnerability of the perf_event_swap_task_ctx_data function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the perfeventswaptaskctxdata function in the Linux operating system’s kernel is related to the exhaustion of resources on the central processor. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerability of the rtw_wx_read32() function in the drivers/staging/r8188eu/os_dep/ioctl_linux.c module – supports additional devices in the Linux operating system, allowing an attacker to cause a service failure.

Vulnerability of the rtwwxread32 function in the drivers/staging/r8188eu/osdep/ioctllinux.c module – Support for additional devices in the Linux operating system involves uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the tcp_conn_request() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the tcpconnrequest function in the Linux operating system’s kernel is related to the lack of memory release after the effective lifespan of the function has ended. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `nft_set_ext` function in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the nftsetext function in the Linux operating system’s kernel is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the nvmet component in the nvmet_root_discovery_nqn_store() function of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmet component, specifically the nvmetrootdiscoverynqnstore function in the Linux operating system’s kernel, is related to the use of incorrect authentication tokens due to unlimited resource allocation. Exploiting this vulnerability could allow a remote attacker to caus...

The vulnerability of the mm/swapfile component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the mm/swapfile component in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the p9_socket_open() function in the net/9p/trans_fd.c module of the 9P protocol implementation in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the p9socketopen function in the net/9p/transfd.c module of the 9P protocol implementation in the Linux operating system is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could allow an attacker to cause service...

CVE-2025-0122

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

CVE-2025-0122 Prisma SD-WAN: Denial of Service (DoS) Vulnerability Through Burst of Crafted Packets

A denial-of-service DoS vulnerability in Palo Alto Networks Prisma® SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN ION device to disrupt the packet processing capabilities of the device by sending a burst of crafted packets to that device...

Threat actors thrive in chaos

Welcome to this week's edition of the Threat Source newsletter. If there's one thing that threat actors love, it's chaos. Headlines in the news that provoke an emotional response make excellent phishing lures because the intense feelings invoked by a provocative subject line cause our critical...