The vulnerabilities of Node.js’s HTTP components, which allow attackers to trigger service failures

The vulnerability of Node.js’s HTTP components is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The vulnerability of the node_http2 components in the Node.js software platform allows a attacker to cause a service failure.

The vulnerability of the nodehttp2 components in the Node.js software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Silicon Labs Simplicity SDK 安全漏洞

Silicon Labs Simplicity SDK is a core software development kit provided by Silicon Labs, Inc. in the United States. The Silicon Labs Simplicity SDK has a security vulnerability. This vulnerability arises from truncated 802.15.4 packet data, which may lead to assertion failures and potentially cau...

The vulnerability of the rcu_read_unlock_special() function in the kernel/rcu/tree_plugin.h module of the Linux operating system allows a attacker to gain access to protected information or cause a service failure.

The vulnerability of the rcureadunlockspecial function in the kernel/rcu/treeplugin.h module of the Linux operating system is related to state management errors. Exploiting this vulnerability could allow an attacker to access protected information or cause service failures...

The vulnerability of the init() and fini() functions in the drivers/char/virtio_console.c module of the Linux kernel driver support for alphanumeric devices allows a attacker to cause a service failure.

The vulnerability of the init and fini functions in the drivers/char/virtioconsole.c driver module, which supports alphanumeric devices in Linux kernels, relates to the exposure of information through event log files. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the sc16is7xx_probe() function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel’s parallel port allows a attacker to cause a service failure.

The vulnerability of the sc16is7xxprobe function in the drivers/tty/serial/sc16is7xx.c file of the console TTY driver in the Linux kernel is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the blkcg_activate_policy() function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, allows a attacker to trigger a service failure.

The vulnerability of the blkcgactivatepolicy function in the block/blk-cgroup.c module, which supports the block-level kernel in the Linux operating system, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause service failures...

EUVD-2025-206716

NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting XSS vulnerability exists in versions 2.11.0 through 3.7.x in the ProtectedError handling logic, where object names are included in HTML error messages without proper...

The vulnerability of the ima_match_rules() function in the security/integrity/ima/ima_policy.c module of the Linux kernel’s security subsystem allows a attacker to cause a service failure.

The vulnerability of the imamatchrules function in the security/integrity/ima/imapolicy.c module of the Linux kernel’s security subsystem is related to incorrect initialization of resources. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the print_wrapper_info() function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel’s multimedia device driver allows a hacker to cause a service failure.

The vulnerability of the printwrapperinfo function in the drivers/media/platform/nxp/imx-jpeg/mxc-jpeg-hw.c file of the Linux kernel multimedia device driver is related to the improper disabling or release of resources. Exploiting this vulnerability could allow a remote attacker to cause service...

The vulnerability of embedded software developed by Qualcomm, due to insufficient testing of input data, allows attackers to trigger service failures.

The vulnerability of embedded software developed by Qualcomm exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

DuoLungo: Usability Study of Duo 2FA

Multi-Factor Authentication MFA enhances login security by requiring multiple authentication factors. Its adoption has increased in response to more frequent and sophisticated attacks. Duo is widely used by organizations including Fortune 500 companies and major educational institutions, yet its...

CVE-2025-71190

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...

CVE-2025-71190 dmaengine: bcm-sba-raid: fix device leak on probe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...

EUVD-2025-206585

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...

CVE-2025-71190 dmaengine: bcm-sba-raid: fix device leak on probe

In the Linux kernel, the following vulnerability has been resolved: dmaengine: bcm-sba-raid: fix device leak on probe Make sure to drop the reference taken when looking up the mailbox device during probe on probe failures and on driver unbind...

EulerOS Virtualization 2.10.1 : libssh (EulerOS-SA-2026-1127)

According to the versions of the libssh package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the libssh library. An out-of-bounds read can be triggered in the sftphandle function due to an incorrect...

The vulnerability of the Linux operating system’s kernel, which allows a hacker to trigger a service failure

The vulnerability of the Linux operating system’s kernel is related to insufficient resource control during its existence. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the Jose4j JWT library, related to improper protection of security tokens, allows a attacker to trigger a service failure.

The vulnerability of the Jose4j JWT library is related to improper protection of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service failures...

The vulnerability of the Polkit authentication mechanism implemented by the InputPlumber utility in the Linux operating system allows a hacker to circumvent existing security restrictions, cause service failures, or gain increased privileges.

The vulnerability of the Polkit authentication mechanism in the Linux operating system’s InputPlumber utility is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions, cause service failures, o...