The vulnerability of the acpi_ds_init_aml_walk() function in the driver drivers/acpi/acpica/dswstate.c of the ACPI driver (an extended configuration and power management interface) in the Linux kernel allows a malicious actor to cause a service failure.

The vulnerability of the acpidsinitamlwalk function in the driver drivers/acpi/acpica/dswstate.c of the ACPI driver an extended configuration and power management interface for the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the sdw_drv_probe() function in the drivers/soundwire/bus_type.c file of the SoundWire driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the sdwdrvprobe function in the drivers/soundwire/bustype.c file of the SoundWire driver for the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the sk_msg_recvmsg() function in the net/core/skmsg.c module allows a hacker to cause a service failure in the Linux kernel’s networking functions.

The vulnerability of the skmsgrecvmsg function in the net/core/skmsg.c module related to Linux kernel’s network function support involves pointer manipulation. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

PT-2026-30194

A vulnerability was detected in Investory Toy Planet Trouble App up to 1.5.5 on Android. Impacted is an unknown function of the file assets/google-services-desktop.json of the component app.investory.toyfactory. The manipulation of the argument current key results in use of hard-coded cryptograph...

Gardyn 安全漏洞

Gardyn is an indoor smart hydroponic cultivation device developed by the American company Gardyn. There is a security vulnerability in Gardyn. This vulnerability stems from a specific endpoint that allows authenticated users to access other users’ profiles by modifying ID numbers in API calls,...

The vulnerability of the amdgpu_cs_submit() function in the drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c file of the Direct Rendering Infrastructure (DRI) driver for AMD GPU cores in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the amdgpucssubmit function in the drivers/gpu/drm/amd/amdgpu/amdgpucs.c file of the Direct Rendering Infrastructure DRI driver for AMD GPU cores in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a...

The vulnerability of the snd_hdac_regmap_sync() function in the sound/hda/hdac_regmap.c module of the Linux kernel’s audio subsystem allows a hacker to cause a system failure.

The vulnerability of the sndhdacregmapsync function in the sound/hda/hdacregmap.c module of the Linux kernel’s audio subsystem is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the mlx5_lag_add_netdev() function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c driver for Mellanox Ethernet network adapters in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the mlx5lagaddnetdev function in the drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c file of the Mellanox Ethernet network adapter driver in the Linux operating system is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause a...

The vulnerability of the xfrm_lookup_with_ifid() function in the net/xfrm/xfrm_policy.c module of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the xfrmlookupwithifid function in the net/xfrm/xfrmpolicy.c module of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

core-rs-albatross 数据伪造问题漏洞

core-rs-albatross is a Rust implementation of the Albatross protocol developed by Nimiq. Versions prior to 1.3.0 of core-rs-albatross had a data manipulation vulnerability. This vulnerability stemmed from the lack of checking the interlink bindings of election macroblocks, which could lead to the...

The vulnerability of the rtw89_scan_get_6g_disabled_chan() function in the drivers/net/wireless/realtek/rtw89/fw.c driver module of the Realtek wireless adapter support library in the Linux kernel allows a hacker to induce a service failure.

The vulnerability of the rtw89scanget6gdisabledchan function in the drivers/net/wireless/realtek/rtw89/fw.c file of the Realtek wireless adapter support driver in the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the bl_unregister_scsi() function in the fs/nfs/blocklayout/dev.c module, which is part of the NFS client support in Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the blunregisterscsi function in the fs/nfs/blocklayout/dev.c module, which is part of the NFS client support in Linux kernel, relates to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-5311

A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. Affected is the function...

CVE-2026-35053

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints GET /workflow/manual/run/:workflowId and POST /workflow/manual/run/:workflowId without any authentication middleware. An attacker who ca...

CVE-2026-5420

A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.sort.sorting.games. Performing a manipulation of the argument AESIV/AESPASSWORD results in use of hard-coded...

CVE-2026-5420

A security flaw has been discovered in Shinrays Games Goods Triple App up to 1.200. The affected element is an unknown function of the file jRwTX.java of the component cats.goods.sort.sorting.games. Performing a manipulation of the argument AESIV/AESPASSWORD results in use of hard-coded...

CVE-2026-5420

CVE-2026-5420 affects Shinrays Games Goods Triple App (up to 1.200), specifically the component cats.goods.sort.sorting.games and the file jRwTX.java. The issue arises from manipulating AES_IV/AES_PASSWORD, resulting in the use of a hard-coded cryptographic key. Local attack is required with high...

CVE-2026-35053 OneUptime: Unauthenticated Workflow Execution via ManualAPI

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints GET /workflow/manual/run/:workflowId and POST /workflow/manual/run/:workflowId without any authentication middleware. An attacker who ca...

EUVD-2026-18542

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints GET /workflow/manual/run/:workflowId and POST /workflow/manual/run/:workflowId without any authentication middleware. An attacker who ca...

CVE-2026-35053

OneUptime is an open-source monitoring and observability platform. Prior to version 10.0.42, the Worker service's ManualAPI exposes workflow execution endpoints GET /workflow/manual/run/:workflowId and POST /workflow/manual/run/:workflowId without any authentication middleware. An attacker who ca...