The vulnerability of the parse_apply_sb_mount_options() function in the fs/ext4/super.c module of the Ext4 file system of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the parseapplysbmountoptions function in the fs/ext4/super.c module of the Ext4 file system in the Linux operating system is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability could all...

The vulnerability of software for storing images with a wide dynamic range of brightness, related to errors during initialization of variables, allows a hacker to cause a service failure.

The vulnerability of software for storing images with a wide dynamic range of brightness in the OpenEXR format is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the nilfs2 component in the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the nilfs2 component in the Linux operating system’s kernel is related to insufficient blocking mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the H5FS__sinfo_serialize_node_cb function in the src/H5FScache.c component of the HDF5 processing library allows a attacker to trigger a service failure.

The vulnerability of the H5FSsinfoserializenodecb function in the src/H5FScache.c component of the HDF5 processing library is related to the failure of the operation outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the DRM/amdgpu cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/amdgpu cores in the Linux operating system is related to reading data from buffers beyond their allowable limits. Exploiting this vulnerability can allow an attacker to cause service interruptions...

The vulnerability of the p9_connCancel() function in the net/9p/trans_fd.c module of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the p9connCancel function in the net/9p/transfd.c module of the Linux kernel is related to insufficient locking of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the wdt_probe() function in the drivers/watchdog/via_wdt.c module exposes the support for kernel watchdog timers in the Linux operating system, allowing a malicious actor to trigger a service failure.

The vulnerability of the wdtprobe function in the drivers/watchdog/viawdt.c module related to Linux kernel watchdog timer support involves unconstrained and unrestricted resource allocation. Exploiting this vulnerability could allow a perpetrator to trigger a service failure...

The vulnerability of the drm/xe/guc component in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drm/xe/guc component in the Linux operating system is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause service failures...

Delta Electronics COMMGR2 Denial of Service Vulnerability

Delta Electronics COMMGR2 is an automation equipment communication management software from Delta Electronics China. A denial of service vulnerability exists in Delta Electronics COMMGR2, which can be exploited by an attacker to cause a denial of service...

RealtyScript SQL注入漏洞

RealtyScript is a real estate website management system developed by RealtyScript Inc. Version 4.0.2 of RealtyScript has a SQL injection vulnerability, which stems from improper cleaning of the uid and agent parameters. This vulnerability could allow unverified attackers to inject arbitrary SQL...

Why Most DDoS Protection Fails: Solving for Continuity and Resilience

Most organisations assume DDoS Distributed denial of service protection is a box they’ve already ticked. If traffic spikes or an attack starts, the thinking goes, their provider will absorb it and move on. But in the real world it can be a different story. Many incidents aren’t caused by the scal...

CVE-2026-32319

Ella Core is a 5G core designed for private networks. Prior to 1.5.1, Ella Core panics when processing a malformed integrity protected NGAP/NAS message with a length under 7 bytes. An attacker able to send crafted NAS messages to Ella Core can crash the process, causing service disruption for all...

CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-30955 Gokapi vulnerable to DoS in E2E Metadata Parser

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-30955

Gokapi is a self-hosted file sharing server with automatic expiration and encryption support. Prior to 2.2.4, An API endpoint accepts unbounded request bodies without any size limit. An authenticated user can cause an OOM kill and complete service disruption for all users. This vulnerability is...

CVE-2026-23940

CVE-2026-23940 describes an Uncontrolled Resource Consumption vulnerability in hexpm/hexpm that allows Excessive Allocation during package upload. Publishing an oversized package can exhaust memory during tarball extraction, potentially terminating the affected Hex.pm instance and causing a denia...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the processing of a malformed integrity-protected NGAP/NAS message with a length under 7 bytes. An attacker can cause the process to crash and disrupt service for all connected subscribers by sending specially...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read through the processing of a PathSwitchRequest containing UE Security Capabilities with zero-length NR encryption or integrity protection algorithm bitstrings. An attacker can cause the process to crash and disrupt...

Ella Core 缓冲区错误漏洞

Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.5.1 contained a buffer error vulnerability. This vulnerability occurred when processingNGAP/NAS messages with a length of less than 7 bytes,...

The vulnerability of the WPE WebKit and WebKitGTK web page rendering modules, related to the occurrence of operations outside the buffer in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WPE WebKit and WebKitGTK page rendering modules is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a remote attacker to access confidential data, compromise its integrity, and cause service failures...