641638 matches found
CVE-2026-14696 Ethernet bridge RX packet leak enables denial of service via RX buffer-pool exhaustion
When Ethernet bridging is enabled CONFIGNETETHERNETBRIDGE, ethbridgeinputprocess in subsys/net/l2/ethernet/bridge/bridgeinput.c decides how each frame received on a bridge member interface is handled. For frames that must also be delivered to the local stack, the code called ethbridgehandlelocall...
CVE-2023-31014_Lab
مختبر CVE-2023-31014 لاختطاف الـ Intent الضمني مختبر Android تعليمي أُنشئ استنادًا إلى التقرير العام لثغرة CVE-2023-31014 في تطبيق NVIDIA GeForce NOW لنظام Android. لا يتضمن كود مصدر NVIDIA، ولا سلاسل Action الفعلية، ولا بيانات اعتماد حقيقية. حقائق مؤكدة من التقرير العام الهدف: تطبيق NVIDIA GeFor...
cve-2019-0808-poc
cve-2019-0808-poc cve-2019-0808-poc просто BSOD,используется для перезагрузки ОС;...
CVE-2026-68763
A flaw was found in Apache Tomcat. This vulnerability, an uncontrolled resource consumption issue, arises from an allocation leak in the HTTP/2 backlog tracking when a stream is reset. A remote attacker could exploit this to cause a Denial of Service DoS, making the server unresponsive or...
CVE-2023-31308
A malicious virtual function can invoke certain command handlers in the SMU , causing a denial of service due to an out-of-bounds memory read . Per AMD's CVSS 3.1 rating, the impact is LOW (3.3) with a local attack vector requiring low privileges and no user interaction, affecting only availabili...
CVE-2023-31308
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...
EUVD-2023-60610
A malicious virtual function can invoke the certain command handlers in the SMU, causing a denial of service due to out-of-bounds memory read...
CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
CVE-2026-14367 I3C IBI work-node free-list data race between ISR and workqueue thread
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
EUVD-2026-68718
The I3C IBI subsystem in drivers/i3c/i3cibiworkq.c hands out statically-allocated work nodes through a free-list i3cibiworknodesfree implemented as a plain sysslistt, which provides no synchronization. The allocation helpers i3cibiworkenqueue, i3cibiworkenqueuetargetirq, i3cibiworkenqueuehotjoin,...
CVE-2026-14367
CVE-2026-14367 affects the Zephyr RTOS I3C IBI subsystem in drivers/i3c/i3c_ibi_workq.c. A statically-allocated work-node free-list (sys_slist_t) is accessed without synchronization: ISR-context callers invoke sys_slist_get() while the workqueue thread calls sys_slist_append(). This data race can...
CVE-2026-62299
A flaw was found in CoreDNS, a DNS server. A remote, unauthenticated client can exploit this vulnerability by sending a specially crafted DNS query that triggers a null pointer dereference in the rewrite plugin's EDNS0 response handling. This can lead to a denial of service DoS where the CoreDNS...
nodejs:24 security update
An update is available for module.nodejs, nodejs, module.nodejs-packaging, nodejs-packaging, nodejs-nodemon, module.nodejs-nodemon. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...
RLSA-2026:61386 Important: nodejs:24 security update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion...
CVE-2021-2471
CVE-2021-2471 - XXE в MySQL Connector/J Уязвимость в продукте MySQL Connectors от Oracle MySQL компонент: Connector/J. Затронутые поддерживаемые версии: 8.0.26 и более ранние. Успешные атаки на эту уязвимость могут привести к несанкционированному доступу к критическим данным или полному доступу к...
BrotherVulnerabilities
Appareils Brother multiples : multiples vulnérabilités Aperçu Rapid7 a mené un projet de recherche zero-day sur les imprimantes multifonctions MFP de Brother Industries, Ltd. Cette recherche a abouti à la découverte de huit nouvelles vulnérabilités. Certaines ou toutes ces vulnérabilités ont été...
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...
libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client
A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...
libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write
A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...