CVE-2026-55984

A flaw was found in Gitea. An authenticated attacker could exploit a null pointer dereference within the AddTime API. This can lead to a denial of service DoS, making the application unavailable to legitimate users...

Exploit for CVE-2026-16723

🚨 CVE-2026-16723 — fastjson 1.2.83 @JSONType resource detect...

CVE-2026-72023

A flaw was found in the Linux kernel's octeontx2-pf driver. During the initialization of hardware resources, a memory leak occurs where certain pointer arrays are not properly freed upon failure. This issue could lead to resource exhaustion, potentially resulting in a Denial of Service DoS for th...

CVE-2026-72327

A flaw was found in the Linux kernel's drm/v3d component. The v3dgetcpuindirectcsdparams function does not properly validate a userspace-supplied indirect buffer object BO handle. An attacker, by providing a bogus or stale handle, can cause a NULL pointer dereference. This can lead to a system...

CVE-2026-72403

A flaw was found in the ALSA FireWire Control Protocol FCP component of the Linux kernel. A local attacker with a specially crafted USB device could trigger a NULL pointer dereference. This occurs because the fcpfindfcinterface function attempts to access an endpoint descriptor from a malformed U...

Exploit for Use After Free in Linux Linux_Kernel

S26 SM-S942U1 / m1q GhostLock CVE-2026-43499 — Achieved SELi...

Exploit for CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2...

MAL-2026-14247 Malicious code in magika-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd28e41bc842fd046a2bff254f450edd0b6d2d15d961fe768cf5e9ebfa197f magika-js is a typosquat of Google's magika library. The postinstall lifecycle script collects installer host identifiers hostname, platform, arch,...

Malicious code in magika-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 41cd28e41bc842fd046a2bff254f450edd0b6d2d15d961fe768cf5e9ebfa197f magika-js is a typosquat of Google's magika library. The postinstall lifecycle script collects installer host identifiers hostname, platform, arch,...

DEBIAN-CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

EUVD-2026-62225

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014

BusyBox up to 1.30.1 has a null pointer dereference in networking/wget.c via the -T argument to the FEATURE_WGET_TIMEOUT handler, requiring local access. CVSS 3.3 LOW. A public PoC exists; apply patch 83a40bf7a93c8ac093d33ab452222dd5b9eb57ff from the BusyBox mirror.

CVE-2026-76014 BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

CVE-2026-76014 BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference

A vulnerability has been found in BusyBox up to 1.30.1. This vulnerability affects unknown code of the file networking/wget.c of the component FEATUREWGETTIMEOUT Handler. Such manipulation of the argument -T leads to null pointer dereference. Local access is required to approach this attack. The...

Moderate: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

kernel: net: atm: fix crash due to unvalidated vcc pointer in sigd_send()

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM networking component. A local attacker, by acting as a malicious signaling daemon, could send a specially crafted message containing an unvalidated pointer. This unvalidated pointer would be directly used by the kernel, leading...