Lucene search
K

2572 matches found

Github Security Blog
Github Security Blog
added 2026/05/22 1:11 p.m.14 views

ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met...

4.1CVSS5.8AI score0.00077EPSS
Exploits0References3Affected Software17
OSV
OSV
added 2026/05/22 1:11 p.m.7 views

GHSA-4G75-9R48-JF92 ImageMagick: Race Condition in distributed pixel cache server can result in file descriptor hijacking

An attacker who can connect to a magick -distribute-cache service can hijack a file descriptor in the server process when a race condition is met...

4.1CVSS5.8AI score0.00077EPSS
Exploits0References3
OSV
OSV
added 2026/05/22 1:10 p.m.5 views

GHSA-P93H-F2JC-477J ImageMagick: Heap Buffer Over-Write in distributed pixel cache server

An attacker who can connect to a magick -distribute-cache service can cause a heap buffer over-write in the server process...

4.1CVSS5.9AI score0.00092EPSS
Exploits0References2
The Hacker News
The Hacker News
added 2026/05/22 8:50 a.m.17 views

Kimwolf DDoS Botnet Operator Arrested in Canada Over DDoS-for-Hire Attacks

The U.S. Department of Justice DoJ on Thursday announced the arrest of a Canadian man in connection with allegedly operating a distributed denial-of-service DDoS botnet known as Kimwolf. In tandem, Jacob Butler aka Dort, 23, Ottawa, Canada, has been charged with offenses related to the developmen...

5.8AI score
Exploits0
OSV
OSV
added 2026/05/21 12:36 p.m.5 views

CLSA-2026-1779366970 tomcat6: Fix of CVE-2026-41284

CVE-2026-41284: tomcat6: WebDAV LOCK/PROPFIND unbounded request body DoS...

7.5CVSS5.8AI score0.0078EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.11 views

PT-2026-42813

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The distributed pixel cache was originally designed to operate without a challenge-response authentication model, which is a security mechanism where one party...

7.5CVSS5.4AI score0.01255EPSS
Exploits2References67
Positive Technologies
Positive Technologies
added 2026/05/21 12:0 a.m.11 views

PT-2026-42812

Name of the Vulnerable Software and Affected Versions ImageMagick affected versions not specified Description A race condition in the magick -distribute-cache service allows a remote attacker to hijack a file descriptor within the server process. Recommendations At the moment, there is no...

7.5CVSS5.5AI score0.01255EPSS
Exploits2References67
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в linux, linux-5.15

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fixed the potential issue of using “glock” after a file system unmount. When a DLM lockspace is released and there are still locks in that lockspace, the DLM will automatically unlock those locks. Commit fb6791d100d1b...

7.8CVSS6.2AI score0.00248EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2026/05/19 10:20 p.m.21 views

USN-8277-1: Linux kernel vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...

9.8CVSS7AI score0.96775EPSS
Exploits227
NVD
NVD
added 2026/05/19 3:16 p.m.10 views

CVE-2026-44159

Tyler Identity Local TID-L uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed since December 2020, and has not been supported since 2021...

9.8CVSS0.00477EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/19 1:45 p.m.12 views

EUVD-2026-30937

Tyler Identity Local TID-L uses documented, default administrative credentials. Users are not required to change the credentials before deployment. TID-L has not been distributed since December 2020, and has not been supported since 2021...

9.8CVSS5.8AI score0.00477EPSS
Exploits0References2
CVE
CVE
added 2026/05/19 1:45 p.m.13 views

CVE-2026-44159

Technical details about CVE-2026-44159 are not publicly available in the provided documents. Monitor for updates from NVD/CVE records.

9.8CVSS5.8AI score0.00477EPSS
Exploits0References2
Packet Storm News
Packet Storm News
added 2026/05/19 12:0 a.m.4 views

Fifty Shades of Darknet

The Invisible Internet Project I2P is a peer-to-peer anonymous overlay network whose architecture includes a structurally distinct sublayer not characterized in existing security literature. We term this sublayer the Exclusive Network: nodes here host operational services and draw on I2P's routin...

5.8AI score
Exploits0
OSV
OSV
added 2026/05/15 4:31 p.m.9 views

GHSA-27W2-87XV-37C6 nimiq-keys: Unchecked Ed25519 signature length in TaggedPublicKey::verify causes remote node panic via DHT

Impact A malicious network peer can crash any Nimiq full node by publishing a crafted Kademlia DHT record containing a TaggedSigned with a signature field whose byte length is not exactly 64. When the victim node's DHT verifier calls TaggedSigned::verify, execution reaches...

7.5CVSS6AI score0.00626EPSS
Exploits0References6
NVD
NVD
added 2026/05/15 10:16 a.m.23 views

CVE-2026-41970

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

6.8CVSS0.00131EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/15 9:33 a.m.7 views

CVE-2026-41970

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

6.8CVSS5.8AI score0.00131EPSS
Exploits0References3Affected Software2
Vulnrichment
Vulnrichment
added 2026/05/15 9:33 a.m.11 views

CVE-2026-41970

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

6.8CVSS5.8AI score0.00131EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/15 9:33 a.m.59 views

CVE-2026-41970

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

6.8CVSS0.00131EPSS
Exploits0References2
CVE
CVE
added 2026/05/15 9:33 a.m.13 views

CVE-2026-41970

The CVE-2026-41970 entry describes an out-of-bounds write vulnerability in the distributed file system module . The available info notes that exploitation could impact availability . The CVSS 3.1 vector indicates Adjacent access, Low privileges, and Low integrity impact with a High availability i...

6.8CVSS5.8AI score0.00131EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/15 9:33 a.m.27 views

EUVD-2026-30534

Out-of-bounds write vulnerability in the distributed file system module. Impact: Successful exploitation of this vulnerability may affect availability...

6.8CVSS5.8AI score0.00131EPSS
Exploits0References2
Rows per page
Query Builder