CVE-2026-93828 exfat: fix handling of damaged volume in exfat_create_upcase_table()

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

EUVD-2026-86217

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

netbsd_hfs

NetBSD hfs 本地溢出 漏洞详情： root@kitploit: sizet hfslibreadanodeoffsetsvoid inbytes, uint16t outoffsetarray void ptr; if inbytes == NULL || outoffsetarray == NULL return 0; ptr = inbytes; / The offset for record 0 which is the very last offset in the node is always equal to 14, the size of the node...

CVE-2026-97362

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

EUVD-2026-85921

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

CVE-2026-97362

HFS2 version 2.4.0 and earlier is vulnerable to a denial of service (DoS) flaw. An unauthenticated attacker can send a single crafted request to trigger a hung serving thread that enters a busy loop . This results in a complete and persistent loss of availability, rendering the file server unresp...

CVE-2026-97362 HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread

HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that allows unauthenticated attackers to cause a complete and persistent loss of availability by sending a single crafted request. Attackers can trigger a hung serving thread that enters a busy loop, rendering the entire fi...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...

CVE-2026-35333

CVE-2026-35333 strongSwan RADIUS attribute-iterator pre-auth 無限ループ / リモートDoS 説明 attributeenumerate in src/libradius/radiusmessage.c:247-271 は、length バイトが sizeofrattrt 2 より小さいRADIUS属性を受け入れます。length == 0 の場合: data-len = next-length - sizeofrattrt は sizet-2 にアンダーフローします this-left -= next-length は lef...

G3-Loop-DoS

G3-Loop-DoS Loop DoS および CVE-2024-2169 の自動脆弱性検出のための Python スクリプト 説明: この Python スクリプトは、Loop DoS 攻撃および仮想的な脆弱性 CVE-2024-2169 に対して潜在的に脆弱なシステムをスキャンするプロセスを自動化します。サービス拒否 DoS 攻撃を受けやすいプロトコルに関連するポートのスキャンに焦点を当てています。このスクリプトは、教育目的または許可されたペネトレーションテストに使用できます。 主な機能: 効率的なスキャン: 脆弱なプロトコルに関連する IP アドレス範囲とポートをスキャンします。...

Linux Distros Unpatched Vulnerability : CVE-2026-93828

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted medi...

brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation

A flaw was found in the brace-expansion library. The expand function does not apply maxLength when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is...

nanoid: nanoid: Denial of Service via negative size input in non-secure module functions

A flaw was found in nanoid Nano ID, a JavaScript library used for generating unique identifiers. This vulnerability allows an attacker to cause a Denial of Service DoS by providing a negative size input to the customAlphabet or nanoid functions within the library's non-secure module. When a...

CVE-2026-6668

A flaw was found in PgBouncer. An unauthenticated remote attacker can exploit an integer overflow in the packet buffer growth logic by providing sufficiently large input. This causes the buffer size computation to overflow, leading to an infinite loop. As a result, a CPU core is saturated, and al...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-96609

Robur Albatross versions 1.0.0 through 2.x before 2.7.2 are vulnerable to a memory exhaustion denial of service. The albatross-console component fails to properly terminate when looping over its internal ring buffer (default 1024 lines). A user with permissions to send console subscription comman...

CVE-2026-96609

Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limit use of the ring buffer, leading to an albatross-console loop with no recognized termination condition. This is only exploitable by users who can send console subscription commands to unikernels that produce sufficient log output to fil...

CVE-2026-81885

A flaw was found in radare2, a reverse engineering framework. By opening a specially crafted NE executable file, an attacker could trigger an an infinite loop within the application's relocation parser. This continuous processing would consume excessive CPU and memory, leading to a denial of...

sdk

@cosignet/sdk 가볍고, 제로 의존성인 TypeScript 클라이언트 for Cosignet — 사람-인-더-루프 승인 방식으로 고위험 AI 에이전트 행동에 대해, 페이로드에 바인딩된 패스키 서명을 제공합니다. 위험한 작업이 실행되기 전에 사람을 루프에 넣으세요: 작업을 일시 중지하고, 특정 사람으로부터 명시적인 패스키 승인Face ID / Touch ID / Windows Hello / 보안 키을 받은 다음, 정확한 페이로드에 바인딩된 서명된 결정이 있을 때만 계속 진행합니다. — 이후에 작업을 변경하면 서명이 더 ...

Wireshark 4.4.x < 4.4.17 Multiple Vulnerabilities (macOS)

The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.17. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.17 advisory. - Memory leak in sharkd 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service CVE-2026-7379 -...