5060 matches found
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in the mapping of physical blocks by the checkswapactivate function, potentially leading...
PT-2026-22919
Name of the Vulnerable Software and Affected Versions Linux kernel versions 6.6 and later Description A flaw exists in the f2fs filesystem within the Linux kernel related to swapfile handling. Specifically, the check swap activate function incorrectly maps physical blocks when a swapfile is small...
OpenClaw's owner-only gateway tool access checks were incomplete in specific authenticated DM flows
Summary In authenticated non-owner DM sessions, a narrow tool-invocation path could reach broader-than-intended owner-only gateway actions. Impact This requires an authenticated non-owner sender in a DM session and a specific tool invocation path. No unauthenticated access is involved, and this...
EUVD-2026-9317
A vulnerability was detected in PhialsBasement nmap-mcp-server up to bee6d23547d57ae02460022f7c78ac0893092e38. Affected by this issue is the function childprocess.exec of the file src/index.ts of the component Nmap CLI Command Handler. The manipulation results in command injection. The attack may...
PT-2026-30180
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contained an issue within the mm/huge memory component, specifically in the move pages huge pmd function. This function incorrectly handled NULL folios when processing...
OpenClaw Server-Side Request Forgery Vulnerability
OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw suffers from a server-side request forgery vulnerability. The vulnerability stems from the fact that SSRF protection can be bypassed using a full form IPv4 mapping IPv6 literal, which can be exploited by an attacke...
ATLAS: AI-Assisted Threat-To-Assertion Learning for System-On-Chip Security Verification
This work presents ATLAS, an LLM-driven framework that bridges standardized threat modeling and property-based formal verification for System-on-Chip SoC security. Starting from vulnerability knowledge bases such as Common Weakness Enumeration CWE, ATLAS identifies SoC-specific assets, maps...
Denial Of Service
pypdf is vulnerable to Denial of Service. The vulnerability is due to an attacker crafting a PDF with unusually large values in the /ToUnicode entry of a font, where parsing this entry leads to long runtimes and large memory consumption, and how attackers can exploit it by using this vulnerabilit...
CVE-2026-25774
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-27773
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-20791
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-20733
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-22878
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
EUVD-2026-8948
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
EUVD-2026-8959
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-25774
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
CVE-2026-22878
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
EUVD-2026-8967
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
EUVD-2026-8928
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...
EUVD-2026-8930
Charging station authentication identifiers are publicly accessible via web-based mapping platforms...