BASM (Broken Authentication & Session Management) at Bouncy Castle Dependency in Crucible Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-59639 was introduced in 4.9.0 and later of Crucible. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

SUSE CVE-2026-72238

In the Linux kernel, the following vulnerability has been resolved: x86/boot: Validate console=uart8250 baud rate to fix early boot hang When the baud rate is empty, 0, invalid, or overflows to 0 when stored as an int, the system will hang during early boot because of a division by zero in...

SUSE CVE-2026-72394

In the Linux kernel, the following vulnerability has been resolved: hwmon: aspeed-g6-pwm-tach Guard fan RPM calculation against divide-by-zero Sashiko reports: In the aspeed-g6-pwm-tacho driver, the aspeedtachvaltorpm function calculates the fan RPM using the tachometer value. However, it does no...

hdf5: HDF5: Denial of Service due to malformed chunk data in files

A flaw was found in HDF5. An attacker can craft a malicious HDF5 file that, when opened and read by an application, exploits a validation bypass. This bypass, related to mismatched chunk-layout dimensionality and dataspace rank, leads to a divide-by-zero error, causing a denial of service DoS and...

SUSE CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

SUSE CVE-2026-72159

In the Linux kernel, the following vulnerability has been resolved: ocfs2: reject non-inline dinodes with isize and zero iclusters On a volume mounted without OCFS2FEATUREINCOMPATSPARSEALLOC, a non-inline regular file with non-zero isize and zero iclusters is structurally malformed: the extent ma...

CVE-2026-80652

A flaw was found in the Linux kernel's Cryptographic Co-processor CCP driver. A local attacker could trigger a kernel crash, leading to a denial of service DoS, by providing a zero-length certificate chain buffer during a Platform Dynamic Hardware PDH export operation. This issue specifically...

CVE-2026-80604

A flaw was found in the Linux kernel's Human Interface Device HID core. When processing numbered reports, the hidgetreport function can attempt to read data from an invalid memory location if a size of zero is provided. This out-of-bounds read can lead to a kernel panic, effectively causing a...

CVE-2026-80594

A flaw was found in the Linux kernel's ims-pcu driver. This vulnerability allows a malicious device to trigger an infinite loop by providing a specially crafted descriptor with a zero-length field during the parsing of CDC union descriptors. This can lead to a Denial of Service DoS condition,...

CVE-2026-80610

A flaw was found in the Linux kernel's net: enetc module. When the numvsi value is zero, a divide-by-zero error occurs during the allocation of network rings. While this issue may not cause an immediate system crash on some architectures, it represents undefined behavior that could lead to system...

Linux TIPC Protocol Heap Buffer Overflow DoS

The vulnerability of the tipcskfilterconnect function in the net/tipc/socket.c module of the TIPC protocol implementation in the Linux operating system is related to insufficient validation of input data when dividing by zero. Exploiting this vulnerability could allow an attacker to cause a servi...

hx9023s.c Heap Buffer Overflow DoS

The vulnerability in the hx9023ssetsampfreq function within the drivers/iio/proximity/hx9023s.c file of various embedded sensor drivers in the Linux kernel is related to insufficient input validation during division by zero. Exploitation of this vulnerability may allow a remote attacker to cause ...

Linux Distros Unpatched Vulnerability : CVE-2026-80652

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - crypto: ccp - Treat zero-length cert chain as query for blob lengths When handling a PDH export, treat a zero-length userspace cert chain buffer as a request to...

Linux Distros Unpatched Vulnerability : CVE-2026-80610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: enetc: fix potential divide-by- zero when numvsi is zero For i.MX94 series, all the...

Linux Distros Unpatched Vulnerability : CVE-2026-38345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Division-by-Zero vulnerability in the ffswsinitsinglecontext function /libswscale/utils.c of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of...

ps4host

PS4Host A zero-dependency PS4 WebKit exploit host with a...

Exploit for CVE-2026-18729

Description Proof of concept exploit code for CVE-2026-18729...

vajra

██╗ ██╗ █████╗ ██╗██████╗ █████╗ ██║ ██║██...

Malware in framework-zero

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

libevent: Libevent: Memory corruption due to use-after-free

A flaw was found in Libevent, an event notification library. A use-after-free vulnerability exists in the evbufferaddbufferreference function when it processes an output buffer with a zero length. This can lead to a dangling pointer, which an attacker could exploit to cause memory corruption or...