Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

...

Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.

...

CVE-2025-20368

In Splunk Enterprise versions below 9.4.4, 9.3.6, and 9.2.8, and Splunk Cloud Platform versions below 9.3.2411.108, 9.3.2408.118 and 9.2.2406.123, a low privileged user that does not hold the admin or power Splunk roles could craft a malicious payload through the error messages and job inspection...

UBUNTU-CVE-2023-53473

In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4dirhash The ext4dirhash will almost never fail, especially when the hash tree feature was first introduced. However, with the addition of support of encrypted, casefolded file names, that...

CVE-2023-53473 ext4: improve error handling from ext4_dirhash()

In the Linux kernel, the following vulnerability has been resolved: ext4: improve error handling from ext4dirhash The ext4dirhash will almost never fail, especially when the hash tree feature was first introduced. However, with the addition of support of encrypted, casefolded file names, that...

PT-2025-40271

Name of the Vulnerable Software and Affected Versions Splunk Enterprise versions prior to 9.4.4 Splunk Enterprise versions 9.2.8 through 9.3.6 Splunk Cloud Platform versions prior to 9.3.2411.108 Splunk Cloud Platform versions 9.2.2406.123 through 9.3.2408.118 Description A user with limited...

The vulnerability of the device_add function in Linux kernel, which allows a hacker to trigger a service failure

The vulnerability of the deviceadd function in Linux kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the cas_init_one function in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the casinitone function in Linux kernel relates to memory release errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the cpu_map_update_elem function in Linux kernel allows a hacker to trigger a service failure.

The vulnerability of the cpumapupdateelem function in Linux kernel is related to memory release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from mishandling of XDP initialization errors, which could lead to a resource leak...

K000156692: Multiple ImageMagick vulnerabilities

Security Advisory Description CVE-2016-5010 coders/tiff.c in ImageMagick before 6.9.5-3 allows remote attackers to cause a denial of service out-of-bounds read via a crafted TIFF file. CVE-2016-5687 The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4...

📄 Trivision NC-227WF Username Enumeration

Trivision NC-227WF with firmware version 5.80 build 0141010 has a login mechanism that reveals whether a username exists or not by returning different error messages. CVE-2025-56764 — Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a...

[SECURITY] [DLA 4305-2] firefox-esr regression update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4305-2 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort September 29, 2025 https://wiki.debian.org/LTS -...

The vulnerability of the drivers/accel/ivpu components in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the drivers/accel/ivpu components in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

Vulnerabilities of components such as drivers, USB, Type-C, UCSC, and the Linux operating system’s kernel, which allow attackers to cause service interruptions.

The vulnerability of components such as drivers, USB, Type-C, UCSC, and the Linux kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

FuncPoison: Poisoning Function Library to Hijack Multi-Agent Autonomous Driving Systems

Autonomous driving systems increasingly rely on multi-agent architectures powered by large language models LLMs, where specialized agents collaborate to perceive, reason, and plan. A key component of these systems is the shared function library, a collection of software tools that agents use to...

PT-2025-39869

Name of the Vulnerable Software and Affected Versions Trivision NC-227WF firmware version 5.80 build 20141010 Description The login mechanism in the software allows an attacker to determine if a username is valid by observing different error messages. Specifically, a “Unknown user” message...

The vulnerability of the bpfTrace.c component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the bpfTrace.c component in the Linux operating system is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of monitoring software and Performance Co-Pilot (PCP) systems, which are related to errors in link handling, allows attackers to enhance their privileges.

The vulnerability of monitoring software and Performance Co-Pilot PCP systems is related to errors in link handling. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability in the driver/gpu/drm/xe/xe_hmm.c kernel module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the drivers/gpu/drm/xe/xehmm.c component of the Linux operating system’s kernel is related to errors during thread blocking. Exploiting this vulnerability can allow an attacker to cause a service failure...