Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by the American company Apple for Mac computers. Versions of Apple macOS Sequoia 15.1 had a security vulnerability due to insufficient checks, which could allow malicious applications to modify the protected portion of the file system...

SillyTavern 路径遍历漏洞

SillyTavern is a frontend interface for the SillyTavern open-source language model. Versions of SillyTavern prior to 1.17.0 had a path traversal vulnerability. This vulnerability stemmed from the static file routing mechanism, which allowed path traversal attacks. As a result, any unauthenticated...

fast-filesystem-mcp 命令注入漏洞

fast-filesystem-mcp is a model context protocol server developed by Efforthye. Versions of fast-filesystem-mcp 3.5.1 and earlier contained a command injection vulnerability. This vulnerability originated from the handleGetDiskUsage function in the file src/index.ts, which allowed command injectio...

USN-8143-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - GPU drivers; - BTRFS file system; - GFS2 file system; - UDF file system; - NFC subsystem; -...

CLEANSTART-2026-XU81487 Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 4.13.0-r0, 4.13.0-r1

Multiple security vulnerabilities affect the kubernetes-csi-driver-nfs-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

The vulnerability of the zlib_compress_folios() function in the fs/btrfs/zlib.c module of the Btrfs file system support in the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the zlibcompressfolios function in the fs/btrfs/zlib.c module of the Btrfs file system support in Linux kernel affects the handling of operations that involve moving data out of the buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfs_read_to_pagecache() function in the fs/netfs/buffered_read.c module of the Linux kernel’s network file system support mechanism allows a attacker to gain access to protected information or cause service interruptions.

The vulnerability of the netfsreadtopagecache function in the fs/netfs/bufferedread.c module of the Linux kernel’s network file system support mechanism is related to the copying of buffers without checking the size of the input data a classic buffer overflow attack. Exploiting this vulnerability...

The vulnerability of the z_erofs_get_gbuf() function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support for the Linux operating system, allows a malicious actor to cause a service failure.

The vulnerability of the zerofsgetgbuf function in the fs/erofs/zutil.c module, which is part of the EROFS Enhanced Read-Only File System support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to...

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a race condition between data release and access to the file system data. This vulnerability may...

The vulnerability of the __debugfs_file_removed() function in the fs/debugfs/inode.c module of the Linux file system support module allows a hacker to trigger a service failure.

The vulnerability of the debugfsfileremoved function in the fs/debugfs/inode.c file of the Linux file system support module is related to incorrect resource locking. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the nfsd4_encode_fattr4() function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, allows a hacker to cause a service failure.

The vulnerability of the nfsd4encodefattr4 function in the fs/nfsd/nfs4xdr.c module, which is part of the Linux kernel’s Network File System support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause service failures...

Medium: kernel6.18

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: audit: add fchmodat2 to change attributes class CVE-2025-71239 In the Linux kernel, the following vulnerability has been resolved: fs: ntfs3: fix infinite loop in attrloadrunsrange on inconsistent metadata...

The vulnerability of the f2fs_expand inode_data() function in the fs/f2fs/file.c module of the F2FS file system in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the f2fsexpand inodedata function in the fs/f2fs/file.c module of the F2FS file system in the Linux operating system is related to the handling of general resources without synchronization race condition. Exploiting this vulnerability could allow a attacker to cause service...

The vulnerability of the make_uffdwppte() function in the fs/proc/task_mmu.c module of the Linux kernel’s file system support module allows a attacker to cause a service failure.

The vulnerability of the makeuffdwppte function in the fs/proc/taskmmu.c module of the Linux kernel’s file system support module is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

Security Bulletin: Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950.

Summary Maximo AI Service uses tar-7.4.3.tgz which is vulnerable to CVE-2026-23745 and CVE-2026-23950. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2026-23950 DESCRIPTION: node-tar,a Tar for Node.js, has a race condition...

CVE-2026-32988

OpenClaw before 2026.3.11 contains a sandbox boundary bypass vulnerability in fs-bridge staged writes where temporary file creation and population are not pinned to a verified parent directory. Attackers can exploit a race condition in parent-path alias changes to write attacker-controlled bytes...

Security information for Hitachi Disk Array Systems

Overview CVE-2026-20846 | GDI+ Denial of Service Vulnerability CVE-2026-21222 | Windows Kernel Information Disclosure Vulnerability CVE-2026-21231 | Windows Kernel Elevation of Privilege Vulnerability CVE-2026-21234 | Windows Connected Devices Platform Service Elevation of Privilege Vulnerability...

PT-2026-29422

Name of the Vulnerable Software and Affected Versions ONNX versions prior to 1.21.0 Description ONNX contains a path traversal vulnerability via symlink that allows reading arbitrary files outside the model or user-provided directory. The vulnerability exists because the check for symlinks is...

Unspecified vulnerability in Apple macOS Tahoe (CNVD-2026-19041)

Apple macOS Tahoe is an operating system from the American company Apple. A security vulnerability exists in Apple macOS Tahoe, which can be exploited by an attacker to access protected portions of the file system...

PT-2026-33160

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.101 Description A use after free issue in FileSystem allows a remote attacker to potentially exploit object corruption via a crafted HTML page. Use after free is a memory corruption flaw that occurs...