42003 matches found
EUVD-2026-76620
In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...
CVE-2026-89709 lockd, nfsd: RCU-protect nlmsvc_ops dispatch
In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd: RCU-protect nlmsvcops dispatch nlmsvcops is published by nfsdlockdinit and cleared by nfsdlockdshutdown with plain stores, while lockd dereferences it unguarded from dispatch sites in fs/lockd/svcsubs.c. The pointer...
CVE-2026-89708
CVE-2026-89708 is a use-after-free race condition in the Linux kernel's NFS daemon (nfsd) . During NFSv4 session teardown (DESTROY_SESSION), the session memory can be freed via kfree() while an in-flight callback rpc_task on rpciod still dereferences clp->cl_cb_session. The workqueue flush in ...
CVE-2026-89708 nfsd: RCU-protect cl_cb_session to fix use-after-free on session teardown
In the Linux kernel, the following vulnerability has been resolved: nfsd: RCU-protect clcbsession to fix use-after-free on session teardown After a DESTROYSESSION the per-session teardown path can free a session while rpciod still holds an inflight callback rpctask that dereferences...
EUVD-2026-76438
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...
CVE-2026-89532
This is an integer underflow in the Linux kernel's svcrdma (NFS/RDMA server) component. When a parsed chunk has ch_segcount == 0, the pcl_for_each_segment macro computes an inclusive upper bound as &ch_segments[0 - 1], which wraps the u32 to 0xFFFFFFFF, causing the loop to walk unrelated memory a...
CVE-2026-89532
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...
CVE-2026-89532 svcrdma: Fix pcl_for_each_segment for empty chunks
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Fix pclforeachsegment for empty chunks When a parsed chunk list contains a chunk whose chsegcount is zero, pclforeachsegment computes its inclusive upper bound as &chunk-chsegmentschsegcount - 1. chsegcount is u32, so th...
clairvoyance
🔮 clairvoyance Clairvoyance /klɛərˈvɔɪəns /; from French clair meaning clear and voyance meaning vision from Wikipedia. Overview clairvoyance creates a colorful visualization of the page protection of an entire 64-bit process address space user and kernel running on a Windows 64-bit kernel. To...
armadito-windows-driver
Armadito Windows Driver Armadito Windows Driver is responsible of on-access protection of Armadito antivirus. Copyright C Teclib', 2015, 2016 Project home : http://www.teclib-edition.com/teclib-products/armadito-antivirus See Online documentation at : http://armadito-av.readthedocs.io/en/latest/...
Check Risk WAF
Check Risk WAF Российское комплексное облачное WAF-решение для защиты веб-приложений и инфраструктуры Solución integral rusa de WAF en la nube para la protección de aplicaciones web e infraestructura Сайт · Документация · Русский · English...
CVE-2026-89245 WWBN AVideo Cross-Site Request Forgery via playlistRemove.php
WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in playlistRemove.php that allows attackers to delete playlists by skipping CSRF protection checks. Attackers can craft a malicious form that submits a POST request to...
CVE-2026-89174
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
CVE-2026-89174 Kingdom Communication Associated｜Smart Video Intercom System - Missing Burte-force Protection
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
EUVD-2026-76001
Smart Video Intercom System developed by Kingdom Communication Associated has a Missing Brute-force Protection vulnerability. Unauthenticated remote attackers can gain access to valid accounts through a large number of login attempts...
Disable-TamperProtection
Disabling Tamper Protection and other Defender / MDE components It is possible to abuse SYSTEM / TrustedInstaller privileges to tamper or delete WdFilter settings ALTITUDE regkey and unload the kernel minidriver to disable Tamper protection and other Defender components. This also affects...
wibu-codemeter-analysis
Cryptographic Analysis of WIBU CodeMeter DLL Independent security research on WIBU-Systems CodeMeter protection Responsible Disclosure Vendor notified: December 24, 2025 Disclosure period: 90 days Public release: March 24, 2026 Scope: WibuBz32.dll analysis only Summary Analysis of WIBU CodeMeter...
DEBIAN-CVE-2026-89169
live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-signature protection mechanism when the .verity file is missing...