PT-2026-24290

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description A flaw exists in the Windows Device Association Service related to synchronization errors when using a shared resource. This issue, described as a 'race condition', could allow an...

ROS-20260310-73-0022

Vulnerability in python-filelock related to synchronization errors when using a shared resource. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

CVE-2026-31827: Concurrent Execution using Shared Resource with Improper Synchronization

Alienbin is an anonymous code and text sharing web service. In 1.0.0 and earlier, the /save endpoint in server.js drops and recreates the MongoDB TTL index on the entire post collection for every new paste submission. When User B submits a paste with a short TTL e.g., 30 seconds, the TTL index is...

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool, which allows a perpetrator to modify the protected data.

The vulnerability of the shadow copying subsystem of the Secret Net Studio protection tool is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to modify the protected data...

The vulnerability of the iommufd component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the iommufd component in the Linux operating system’s kernel is related to the simultaneous execution using shared resources with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause a service failure...

PowerSync Service 授权问题漏洞

PowerSync Service is a local-first synchronization engine developed by PowerSync as open source. Version 1.20.0 of PowerSync Service contains an authorization vulnerability. This vulnerability arises from ignoring certain subquery filters when using a new synchronization stream, which may allow...

PT-2026-34798

Уязвимость подсистемы теневого копирования средства защиты информации Secret Net Studio связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю осуществить модификацию защищаемых данных...

AgenticCyOps: Securing Multi-Agentic AI Integration in Enterprise Cyber Operations

Multi-agent systems MAS powered by LLMs promise adaptive, reasoning-driven enterprise workflows, yet granting agents autonomous control over tools, memory, and communication introduces attack surfaces absent from deterministic pipelines. While current research largely addresses prompt-level...

CVE-2026-0995

An issue has been identified in Arm C1-Pro before r1p2-50eac0, where, under certain conditions, a TLBI+DSB might fail to ensure the completion of memory accesses related to SME...

The vulnerability of the rxrpc_send_data() function in the net/rxrpc/sendmsg.c module, which is part of the RxRPC session socket support in the Linux operating system, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the rxrpcsenddata function in the net/rxrpc/sendmsg.c module, which supports RxRPC session sockets in Linux operating systems, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise the...

The vulnerability of the qcom_mhi_qrtr_probe() function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC router support for Linux operating systems, allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qcommhiqrtrprobe function in the net/qrtr/mhi.c module, which is part of the Qualcomm IPC router support in the Linux operating system, is related to synchronization errors when using shared resources. Exploiting this vulnerability could allow an attacker to compromise th...

Vulnerability of the do_journal_discard() function in the drivers/md/bcache/journal.c module – A driver for supporting multiple device types (RAID and LVM) in the Linux kernel, which allows a hacker to trigger a service failure.

Vulnerability of the dojournaldiscard function in the drivers/md/bcache/journal.c module – The driver for supporting multiple devices RAID and LVM in the Linux kernel is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause...

Vulnerability of the lpfc_dmp_dbg() function in the drivers/scsi/lpfc/lpfc_init.c module – The SCSI device support driver in the Linux operating system allows a hacker to cause a service failure.

Vulnerability of the lpfcdmpdbg function in the drivers/scsi/lpfc/lpfcinit.c module – The Linux SCSI device support driver is vulnerable to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2026-20018

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

CVE-2026-30795

Cleartext Transmission of Sensitive Information vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Heartbeat sync loop modules allows Sniffing Attacks. This vulnerability is associated with program files src/hbbshttp/sync.Rs and program routine...

CVE-2026-30796 RustDesk Client Transmits Preset Address Book Password Verbatim in Heartbeat Sync

Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacOS, Linux, iOS, Android Address book sync, Heartbeat sync loop modules allows Sniffing Attacks. The client places the preset...

RustDesk 安全漏洞

RustDesk is a remote access and control software developed by RustDesk personal developers. It is primarily written in Rust and can be used to maintain computers and other devices remotely. Versions of RustDesk 1.4.5 and earlier contain security vulnerabilities. These vulnerabilities stem from...

RHEL 9 : kernel (RHSA-2026:3692)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3692 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: scsi: mpi3mr: Synchronous access b/w...

EUVD-2026-9456

A vulnerability in the sftunnel functionality of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, remote attacker with administrative privileges to write arbitrary files as root on the underlying operating...

EUVD-2025-208276

API endpoint for user synchronization in 2N Access Commander version 3.4.1 did not have a sufficient input validation allowing for OS command injection. This vulnerability can only be exploited after authenticating with administrator privileges...