Linux XFS Buffer Overflow DoS

The vulnerabilities of the functions xfsreflinkfillcowhole and xfsreflinkfilldelalloc in the fs/xfs/xfsreflink.c module of the Linux operating system’s file system are related to synchronization errors when using shared resources. Exploiting these vulnerabilities can allow attackers to compromise...

CVE-2026-16730: Improper Handling of Exceptional Conditions

A flaw was found in dbus-broker. When the process file-descriptor limit is reached, EMFILE/ENFILE errors during peer setup notably SOPEERPIDFD are handled as fatal failures, causing the broker to exit. A local attacker who can open many connections to the user session bus can trigger this and den...

PT-2026-64278

Name of the Vulnerable Software and Affected Versions dbus-broker affected versions not specified Description A flaw exists where EMFILE/ENFILE errors, which occur when the process file-descriptor limit is reached during peer setup specifically involving SO PEERPIDFD, are treated as fatal failure...

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR Hydration

NPM: React Router: Arbitrary Constructor Injection via deserializeErrors in React Router SSR Hydration vulnerability discovered by ? in WordPress Npm react-router versions = 6.4.0, 7.18.0...

GHSA-8FPG-XM3F-6CX3 Auth.js: Configuration errors can cause existence-based auth checks to fail open (auth object populated with an error)

Impact next-auth Auth.js v5 applications that gate access by checking only for the existence of the auth object — the pattern shown in the official session management / protecting resources guide — are affected. When the Auth.js configuration produces a server-side error, the auth object exposed ...

WS-2026-0016

NodeBB before v4.14.0: stored XSS in the ActivityPub federation errors admin page - id, type, activityType and body of inbound AP objects rendered without escaping. Fixed in 4.14.0. One of eight Aikido-disclosed flaws; no CVE assigned...

Linux kernel Heap Buffer Overflow DoS

The vulnerability of the am33xxpmprobe function in the drivers/soc/ti/pm33xx.c file of the Linux operating system’s kernel module is related to errors during link generation. Exploiting this vulnerability can allow an attacker to cause a system failure...

Fedora 43 : chromium (2026-ac712bf651)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-ac712bf651 advisory. Update to 150.0.7871.128 CVE-2026-15899: Use after free in CameraCapture CVE-2026-15900: Use after free in GPU CVE-2026-15901: Use after free in...

ROS-20260723-73-0033

The vulnerability in Chromium is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

ROS-20260723-73-0006

The vulnerability in Chromium is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause service failures...

ROS-20260723-73-0042

The vulnerability in Chromium is related to information representation errors in the user interface. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...

Prototype Pollution

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Prototype Pollution via the Edit Fields Set process when output fields are assigned using dot-notation path setters without restricting field names. An attacker can corrupt a shared global in the ma...

EUVD-2026-47779

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error...

CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

SUSE-SU-2026:22810-1 Security update for the Linux Kernel

The SUSE Linux Enterprise Micro 6.0 and Micro 6.1 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2023-20585: iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 bsc1243603. - CVE-2026-31503: udp: Fix wildcard bind...

CodeAlpha_SecureCodingReview

CodeAlphaSecureCodingReview Cyber Security Internship — Co...

PT-2026-63339

There is a privilege escalation vulnerability in some Hikvision cameras. Due to incorrect permission allocation in the device program, attackers can escalate privileges and gain full control of the device after authenticating via SSH...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the snruncoremmiomap function in the arch/x86/events/intel/uncoresnbep.c module of the Linux operating system’s kernel on x86 platforms is related to errors during link time. Exploiting this vulnerability can allow an attacker to cause a service failure...

NTFS File System Privilege Escalation

The vulnerability of the NTFS file system driver in Windows operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to increase their privileges...

Windows Clip Service Privilege Escalation

The vulnerability of the Windows Clip Service on Windows operating systems arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...