CVE-2025-61638

CVE-2025-61638 node . "https://www.mediawiki.org/w/api.php" fixed More exploitable targets can be found at https://www.mediawiki.org/wiki/SitesusingMediaWiki. https://phabricator.wikimedia.org/T401099 https://vulners.com/cve/CVE-2025-61638 XSS attack requires editing entries, so at least xss !==...

PT-2026-81205

U-Boot before 2026.10-rc3 with CONFIG IP DEFRAG enabled contains an out-of-bounds write vulnerability in the net defragment function in net/net.c. Remote attackers can send a crafted IP fragment with non-zero offset and More-Fragments flag set during netboot to corrupt adjacent memory and crash t...

PT-2026-81210

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs readlink reply function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader...

PT-2026-81199

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...