CVE-2026-105923

A flaw was found in qt6. An attacker could exploit this vulnerability to cause a Denial of Service DoS by crashing the application. When the VectorImage component processes a specially crafted Scalable Vector Graphics SVG file, an integer calculation error triggers an invalid memory access...

CVE-2026-98637

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine subsystem for ARM64. When a virtual CPU vCPU fails to initialize Scalable Vector Extension SVE support, feature flags are improperly handled, leaving subsequent vCPUs in an inconsistent state without allocated memory. A guest...

CVE-2026-76492

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

S5Late

S5Late Tethered iPod bootrom/DFU exploit. Currently only supports Nano 7G, to support Nano 6G offsets need to be updated. Running Put your iPod into DFU mode. Then run: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode. 2024-12-15T23:11:34Z INFO S5Late Succesfully...

CVE-2026-76492

The Cisco Expressway Series software is affected by NULL Pointer Dereference vulnerabilities (CWE-476) identified during an internal security review. These vulnerabilities are addressed in the October 2026 Software Hardening Release . The issue carries a HIGH severity rating (CVSS 3.1 score of 7....

EUVD-2026-107351

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Expressway Series software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered...

CVE-2025-60469

A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...

php2shell

php2shell Remote, HTTP-only RCE on PHP 8.4.26 + Apache pref...

EUVD-2026-66564

In the Linux kernel, the following vulnerability has been resolved: firewire: ohci: fix NULL pointer dereference in arcontextrelease During the error handling path of the driver's probe function, a NULL pointer dereference can occur in arcontextrelease. When pciprobe fails early e.g., if...

CVE-2026-93247

A flaw was found in the Linux kernel's Bluetooth subsystem. A local attacker can cause a Denial of Service DoS due to a race condition in the service discovery management code. Under specific timing conditions, clearing discovery filters concurrently with starting service discovery leaves interna...

CVE-2026-93211

A flaw was found in the nfsd component of the Linux kernel. Due to an incorrect initialization order of the Dynamic Resource Cache DRC hash table, a system crash Denial of Service can occur on weakly-ordered architectures like ARM64 and PowerPC. This happens when a shrinker scan attempts to acces...

CVE-2026-98618

A flaw was found in the Linux kernel's fbnic network driver. When configuring the maximum number of standalone transmission and reception channels, the driver under-allocates vector resources, leaving uninitialized entries. This flaw allows a local user with administrative privileges to trigger a...

CVE-2026-98098

A flaw was found in the Linux kernel. A local user can trigger a Denial of Service DoS by binding an excessive number of service addresses to sockets in the Transparent Inter-Process Communication TIPC subsystem. When the internal name table reaches its capacity limit, required protocol service...

CVE-2026-98630

A flaw was found in the Linux kernel's fbnic network driver. When memory allocation for a payload page pool fails, the error cleanup routine incorrectly attempts to destroy an invalid error pointer instead of releasing the allocated header page pool. A local user able to trigger interface queue...

CVE-2026-98086

A flaw was found in the Linux kernel's Advanced Linux Sound Architecture ALSA subsystem. When configuring Universal MIDI Packet UMP devices, the driver prematurely treats endpoint structures as fully initialized before legacy MIDI data structures are attached. A local user or connected device...

CVE-2026-21250

CVE-2026-21250: Windows HTTP.sys Local Privilege Escalation Windows 11 24H2 - Local Privilege Escalation 🚨 Technical analysis and resources for vulnerability CVE-2026-21250 Windows 11 24H2 / 25H2 - Windows Server 2022/2025 This repository contains technical documentation and resources for studyin...

CVE-2025-60489

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60479

A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...

OpenEXR: OpenEXR: Denial of Service or Information Disclosure via crafted EXR image file

A flaw was found in OpenEXR. A remote attacker could provide a specially crafted deep EXR image file, which, when processed by a user, could lead to an out-of-bounds pointer being returned by the TypedDeepImageChannel::row function. This vulnerability could cause the application to crash Denial o...

CVE-2026-90484

The MySQL client response parser in Apache bRPC dereferences a null pointer when the server peer sends a zero-payload-length response packet. A response packet whose declared payload length is zero is accepted by the frame-length check isfullpackage, after which the parser reads the response type...