CVE-2026-105390

Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via a crafted write to the ovpn-dco device, causing the host to become unresponsive...

CVE-2026-90081

A flaw was found in the Linux kernel's Reliable Datagram Sockets RDS component. This vulnerability occurs due to a synchronization issue in the congestion control mechanism. A remote attacker could exploit this by causing a sender to become indefinitely blocked on a congested port, leading to a...

CVE-2026-19936: Concurrent Execution using Shared Resource with Improper Synchronization

The Bluetooth Mesh Access-layer delayable message queue in subsys/bluetooth/mesh/delayablemsg.c shares three intrusive lists busyctx, freectx, freechunks and one kworkdelayable between two cooperative threads with no synchronization: btmeshdelayablemsgmanage runs on the Bluetooth host RX thread,...

ROS-20261013-73-0182

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0245

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0115

The vulnerability of the inetcsklistenstop function in the net/ipv4/inetconnectionsock.c module of the Linux operating system is related to synchronization errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

CVE-2026-109954: Concurrent Execution using Shared Resource with Improper Synchronization

Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests, letting any client's transactional batch request interfere with other clients' database writes. On PostgreSQL or MongoDB replica sets and sharded clusters, other clients'...

ROS-20261013-73-0496

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261013-73-0442

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially...

Compatibility Subsystem Execution Linux Applications Windows WSL2

The vulnerability of the compatibility subsystem’s kernel for running Linux applications involves synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to replace data with malicious content...

ROS-20261012-73-0163

The vulnerability of the smcsetsockopt function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261012-73-0020

The vulnerability in the kernel-lt is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20261012-73-0050

The vulnerability of the nvmeirqcheck function in the drivers/nvme/host/pci.c module of the Linux NVME driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ret-sync

ret-sync ret-sync significa Synchronization de Herramientas de Ingeniería Inversa. Es un conjunto de plugins que ayudan a sincronizar una sesión de depuración WinDbg/GDB/LLDB/OllyDbg/OllyDbg2/x64dbg con un desensamblador IDA/Ghidra/Binary Ninja. La idea subyacente es simple: tomar lo mejor de amb...

idacode

IDACode IDACode facilita la ejecución y depuración de scripts de Python en su entorno IDA sin salir de Visual Studio Code. La extensión de VS Code se puede encontrar en el marketplace. IDACode aún se encuentra en una etapa muy temprana y se espera que haya errores. Por favor, abra un nuevo issue ...

dsync

dsync Plugin de IDAPython que sincroniza las vistas de código descompilado y desensamblado. Consulte los comentarios en el código fuente para más detalles. Requiere IDA Pro 7.3 N.B.: Puede que quieras usar la función de sincronización oficial introducida con IDA 7.3 en su lugar...

ida-efitools2

Informazioni È un plugin IDA per estendere le capacità di reverse engineering UEFI. Basato su ida-efitools con una serie di correzioni e nuove funzionalità. Funziona sia con Python 2 che con Python 3. Supporta versioni obsolete di IDA Pro 7.x senza garanzie. Funzionalità Definizione dei GUID...

CVE-2026-108165

Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata because sync queries do not exclude Locked visibility. Attackers with an active partner relationship can call POST...

EUVD-2026-96320

Immich through 3.3.1 contains a missing authorization vulnerability in the partner synchronization stream that allows authenticated partners to read Locked Folder asset metadata because sync queries do not exclude Locked visibility. Attackers with an active partner relationship can call POST...