Lucene search
+L

8425 matches found

The Hacker News
The Hacker News
added 2026/04/07 11:30 a.m.13 views

The Hidden Cost of Recurring Credential Incidents

When talking about credential security, the focus usually lands on breach prevention. This makes sense when IBM’s 2025 Cost of a Data Breach Report puts the average cost of a breach at $4.4 million. Avoiding even one major incident is enough to justify most security investments, but that headline...

6AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/04/07 12:00 a.m.89 views

VMware Workstation 17.x, 25H2 < 25H2u1 Multiple Vulnerabilities (VMSA-2026-0002)

The version of VMware Workstation installed on the remote host is 17.x, 25H2.x prior to 25H2u1. It is, therefore, affected by multiple vulnerabilities. - VMWare Workstation and Fusion contain a logic flaw in the management of network packets. A malicious actor with administrative privileges on a...

5.9CVSS5.9AI score0.00203EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/04/06 11:24 p.m.14 views

SUSE CVE-2026-33903

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing a specially crafted NGAP LocationReport message. An attacker able to send crafted NGAP messages to Ella Core can crash the process, causing service disruption for all connected subscribers. Version...

6.5CVSS5.8AI score0.00207EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/04/06 11:24 p.m.13 views

SUSE CVE-2026-33907

Ella Core is a 5G core designed for private networks. Versions prior to 1.7.0 panic when processing Authentication Response and Authentication Failure NAS message missing IEs. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

6.5CVSS5.8AI score0.00236EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/04/06 12:00 a.m.18 views

The vulnerability of the swf_def_bits_jpeg function in the MP4Box packaging engine of the GPAC multimedia platform, related to buffer overflow in the stack, allows attackers to cause service failures.

The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...

6.5CVSS6.8AI score0.00252EPSS
SaveExploits0References5Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/03 12:00 a.m.13 views

The vulnerability of the rxe_qp_do_cleanup() function in the drivers/infiniband/sw/rxe/rxe_qp.c module of the Linux operating system’s kernel allows a malicious actor to cause a service failure.

The vulnerability of the rxeqpdocleanup function in the drivers/infiniband/sw/rxe/rxeqp.c module of the Linux operating system’s kernel involves a pointer dereferencing issue. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00204EPSS
SaveExploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/03 12:00 a.m.12 views

The vulnerability of the CI_handle() function in the drivers/staging/media/av7110/av7110_ca.c driver module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the CIhandle function in the drivers/staging/media/av7110/av7110ca.c driver module related to Linux kernel media preparation functions is associated with unauthorized access to the indexed resource. Exploiting this vulnerability could allow an attacker to cause service failur...

5.5CVSS6.7AI score0.00177EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/03 12:00 a.m.14 views

The vulnerability of the `tcp_ao_info_cmd()` function in the `net/ipv4/tcp_ao.c` module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the tcpaoinfocmd function in the net/ipv4/tcpao.c module of the Linux operating system is related to security configuration errors. Exploiting this vulnerability can allow an attacker to cause service failures...

5.5CVSS5.8AI score0.00235EPSS
SaveExploits0References6Affected Software1
EUVD
EUVD
added 2026/04/02 9:32 p.m.19 views

EUVD-2024-55531

Hirschmann Industrial IT products contain a heap overflow vulnerability in the HiLCOS web interface that allows unauthenticated remote attackers to trigger a denial-of-service condition by sending specially crafted requests to the web interface. Attackers can exploit this heap overflow to crash t...

8.7CVSS6AI score0.0043EPSS
SaveExploits0References3
NVD
NVD
added 2026/04/02 8:16 p.m.10 views

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

6.5CVSS0.00317EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/04/02 7:03 p.m.7 views

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

5.8CVSS5.8AI score0.00317EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/02 7:03 p.m.38 views

CVE-2026-34761 Ella Core Panics Upon NGAP handover failure

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

5.8CVSS0.00317EPSS
SaveExploits0References2
attackerkb
attackerkb
added 2026/04/02 7:03 p.m.23 views

CVE-2026-34761

Ella Core is a 5G core designed for private networks. Prior to version 1.8.0, Ella Core panics when processing a NGAP handover failure message. An attacker able to cause a gNodeB to send NGAP handover failure messages to Ella Core can crash the process, causing service disruption for all connecte...

5.8CVSS5.8AI score0.00317EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/02 6:50 p.m.10 views

CVE-2026-34759 OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...

9.2CVSS5.8AI score0.006EPSS
SaveExploits1References3
CVE
CVE
added 2026/04/02 6:50 p.m.51 views

CVE-2026-34759

Affected software: OneUptime Open Source platform (prior to v10.0.42). Vulnerability: Multiple notification API endpoints were registered without authentication middleware, exposing /notification/ and enabling an unauthenticated attacker to exploit a projectId leak from the public Status Page API...

9.2CVSS5.8AI score0.006EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2026/04/02 6:50 p.m.32 views

CVE-2026-34759 OneUptime: Unauthenticated notification API endpoints - financial abuse via phone number purchase, service disruption, and SMTP credential exposure

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, multiple notification API endpoints are registered without authentication middleware, while sibling endpoints in the same codebase correctly use ClusterKeyAuthorization.isAuthorizedServiceMiddleware. Thes...

9.2CVSS0.006EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/04/02 12:00 a.m.24 views

PT-2026-29899

Name of the Vulnerable Software and Affected Versions Hirschmann Industrial IT products BAT-R, BAT-F, BAT450-F, BAT867-R, BAT867-F, WLC, BAT Controller Virtual Description Hirschmann Industrial IT products are susceptible to a heap overflow in the HiLCOS web interface. Unauthenticated remote...

8.7CVSS6AI score0.0043EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2026/04/02 12:00 a.m.18 views

Ella Core 代码问题漏洞

Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.8.0 contained code vulnerabilities. These vulnerabilities stemmed from kernel crashes that occurred when processing messages indicating faile...

6.5CVSS5.9AI score0.00317EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/04/02 12:00 a.m.13 views

The vulnerability of the fw_dev_release() function in the drivers/base/firmware_loader/sysfs.c module of the Linux kernel’s device drivers allows a hacker to trigger a service failure.

The vulnerability of the fwdevrelease function in the drivers/base/firmwareloader/sysfs.c file of the Linux kernel’s device drivers relates to improper memory release memory leak. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

5.7CVSS6.4AI score0.00209EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2026/04/01 10:59 p.m.11 views

GHSA-6GM8-3G4H-W82M Ella Core Panics Upon NGAP handover failure

Summary Ella Core panics when processing a NGAP handover failure message. Impact If an attacker can force a gNodeB to send NGAP handover failure messages to Ella Core, the process will crash, thereby disrupting service for all connected subscribers. Fix Improve guards in NGAP handover handlers...

5.8CVSS5.9AI score0.00317EPSS
SaveExploits0References4
Rows per page
Query Builder