CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-22321

A stack-based buffer overflow in the device's Telnet/SSH CLI login routine occurs when a unauthenticated attacker send an oversized or unexpected username input. An overflow condition crashes the thread handling the login attempt, forcing the session to close. Because other CLI sessions remain...

UBUNTU-CVE-2026-33413

etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.42, 3.5.28, and 3.6.9, unauthorized users may bypass authentication or authorization checks and call certain etcd functions in clusters that expose the gRPC API to untrusted or partially trusted...

Mattermost Plugins 安全漏洞

Mattermost Plugins is a plugin provided by the American company Mattermost, offering powerful feature extensions and tight integration with servers and web/dashboard applications. There are security vulnerabilities in versions prior to 11.4, 11.0.4, 11.1.3, 11.3.2, and 10.11.11.0. These...

CVE-2026-3116: Uncontrolled Resource Consumption

Mattermost Plugins versions =11.4 11.0.4 11.1.3 11.3.2 10.11.11.0 fail to validate incoming request size which allows an authenticated attacker to cause service disruption via the webhook endpoint. Mattermost Advisory ID: MMSA-2026-00589...

The vulnerability of the rproc_coredump_write() function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem allows a attacker to compromise the integrity of protected information or cause service failures.

The vulnerability of the rproccoredumpwrite function in the drivers/remoteproc/remoteprocdebugfs.c driver of the Linux kernel’s remote processor subsystem is related to a numerical order loss or cyclic shift. Exploiting this vulnerability could allow an attacker to compromise the integrity of...

The vulnerability of the `zonefs_i_size_write()` function in the `fs/zonefs/super.c` module of the Linux file system allows a attacker to access protected information or cause service interruptions.

The vulnerability of the zonefsisizewrite function in the fs/zonefs/super.c module of the Linux file system support module involves exposing confidential information. Exploiting this vulnerability could allow an attacker to gain access to protected information or cause service failures...

The vulnerability of the `gen11_compute_sseu_info()` function in the `drivers/gpu/drm/i915/gt/intel_sseu.c` kernel module of the Linux operating system allows a hacker to access protected information or cause service failures.

The vulnerability of the gen11computesseuinfo function in the drivers/gpu/drm/i915/gt/intelsseu.c kernel module of the Linux operating system is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the mlx5e_open_xdpredirect_sq() function in the drivers/net/ethernet/mellanox/mlx5/core/en_main.c driver of the Mellanox Ethernet adapter support module for the Linux operating system allows a attacker to access protected information or cause service failure.

The vulnerability of the mlx5eopenxdpredirectsq function in the drivers/net/ethernet/mellanox/mlx5/core/enmain.c driver of the Mellanox Ethernet adapter support module in the Linux operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this...

The vulnerability of the skb_append_pagefrags() function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, allows a hacker to cause a service failure.

The vulnerability of the skbAppendPageFrags function in the net/core/skbuff.c module, which is part of Linux’s kernel network functions, is related to insufficient resource management during its existence. Exploiting this vulnerability could allow an attacker to cause service failures...

The vulnerability of the smc_init() function in the net/smc/af_smc.c module of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the smcinit function in the net/smc/afsmc.c module of the Linux kernel is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the nsim_pp_hold_write() function in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the nsimppholdwrite function in the drivers/net/netdevsim/netdev.c module of the Linux kernel lies in the lack of checking the return value. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nvme_init_ctrl() function in the drivers/nvme/host/core.c module of the NVME driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the nvmeinitctrl function in the drivers/nvme/host/core.c file of the NVME driver for the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the mtk_iommu_probe_device() function in the drivers/iommu/mtk_iommu.c module of the Linux kernel’s IOMMU support driver allows a hacker to cause a service failure.

The vulnerability of the mtkiommuprobedevice function in the drivers/iommu/mtkiommu.c file of the Linux IOMMU driver module is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the ptp_clock_register() function in the drivers/ptp/ptp_clock.c module of the Linux operating system’s PTP clock support driver allows a hacker to cause a service failure.

The vulnerability of the ptpclockregister function in the drivers/ptp/ptpclock.c module of the Linux operating system’s time support driver lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the tegra210_clock_init() function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver allows a hacker to cause a service failure.

The vulnerability of the tegra210clockinit function in the drivers/clk/tegra/clk-tegra210.c file of the Linux operating system’s Samsung Exynos processor controller driver is related to errors during link counters updates. Exploiting this vulnerability could allow an attacker to cause a service...

The vulnerability of the kvm_arch_vcpu_ioctl() function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the ARM 64-bit kernel-based Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the kvmarchvcpuioctl function in the arch/arm64/kvm/arm.c module of the virtualization subsystem on the 64-bit ARM-based Linux operating system is related to access to an uninitialized pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the thinkpad_acpi_amd_s2idle_restore() function in the drivers/platform/x86/thinkpad_acpi.c driver module allows a attacker to cause a service failure.

The vulnerability of the thinkpadacpiamds2idlerestore function in the drivers/platform/x86/thinkpadacpi.c driver for supporting X86 devices in the Linux operating system is related to improper memory release. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the `rb_check_bpage()` function in the kernel/trace/ring_buffer.c module, which supports Linux operating system debugging, allows a malicious actor to cause a service failure.

The vulnerability of the rbcheckbpage function in the kernel/trace/ringbuffer.c module, which is part of the Linux kernel’s tracing support, is related to improper validation of the integrity check value. Exploiting this vulnerability could allow an attacker to trigger a service failure...

The vulnerability of the nested_svm_vmexit() function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux operating system’s x86 kernel allows a attacker to cause a service failure.

The vulnerability of the nestedsvmvmexit function in the arch/x86/kvm/svm/nested.c module of the virtualization subsystem on the Linux x86 kernel platform is related to the improper elimination of certain elements in the data sent to the client. Exploiting this vulnerability can allow an attacker...