Linux Kernel Security Vulnerabilities

The Linux kernel version 3.15 contains a security vulnerability. This vulnerability stems from the fact that the erasesize parameter of the block2mtd module can be set to zero. When the adddevice function performs a modulo operation using zero as a divisor, it may trigger a division by zero error...

Linux Kernel Security Vulnerabilities

The Linux kernel version 5.16 contains a security vulnerability. This vulnerability arises from failing to check for conversion errors or whether the converted value is zero before processing channel data. This could lead to division by zero...

ROOT-OS-DEBIAN-13-CVE-2026-53106 CVE-2026-53106 in linux - Patched by Root

Root has patched CVE-2026-53106 in the linux package for Root:Debian:13. Multiple fixed versions available...

SECURITY-218

This mitigation is obsolete as of Jenkins 2.54 and Jenkins LTS 2.46.2. If you have installed a 2.54+/LTS 2.46.2+ version of Jenkins anew, the Remoting-based CLI is disabled out of the box. If you installed an older version of Jenkins and upgraded to 2.54+ or LTS 2.46.2+, you will be prompted by a...

flipper-mcp

flipper-mcp A Rust MCP Model Context Protocol server that runs directly on the Flipper Zero's WiFi Dev Board v1 ESP32-S2, enabling AI agents to control a Flipper Zero over the network. What is this? This project puts an MCP server on the Flipper itself. Any MCP-compatible AI client Claude Desktop...

CVE-2026-98409

A flaw was found in the Linux kernel's Realtek RTD119X watchdog driver. During device initialization, the driver fails to verify that the clock rate is valid before performing timeout calculations. A local user capable of triggering device probing under misconfigured clock conditions can cause a...

CVE-2026-98408

A flaw was found in the Linux kernel's Renesas RZ/V2H watchdog timer driver. The driver fails to validate that the clock rate is non-zero during device initialization, leading to a division by zero condition. Under specific hardware or configuration states where the clock rate is zero, this issue...

CVE-2026-111373

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

CVE-2026-111373

FreeRDP versions before 3.32.0 are vulnerable to a NULL pointer dereference within the websocket transport component. A malicious gateway or remote server can trigger a Denial of Service (DoS) by sending a zero-length WebSocket ping message. During processing, the websocket_reply_pong function pa...

CVE-2026-111373 FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

CVE-2026-111373 FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket Ping

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

EUVD-2026-102554

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

UBUNTU-CVE-2026-111373

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

Linux Distros Unpatched Vulnerability : CVE-2026-111373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending...

Red Hat: CVE-2026-111373: freerdp: FreeRDP: Denial of Service via zero-length WebSocket ping

FreeRDP before 3.32.0 contains a NULL pointer dereference vulnerability in the websocket transport that allows a malicious gateway to crash clients by sending zero-length pings. When the payload length is zero, websocketreplypong passes a nullptr stream to websocketreplyclose, triggering an...

EUVD-2026-101603

Dgraph: Zero Unauthenticated HTTP Admin removeNode Denial of Service...

CVE-2026-31431-mitigation-suite

AFALG Defense Framework A kernel-runtime defense framework for the Linux AFALG Address Family Algorithm, family 38 subsystem. Built for Security Operations Centers running enterprise Linux fleets where Zero Trust must extend into the kernel, not stop at the network edge. Why AFALG matters to a SO...

CVE-2026-0073

🔓 CVE-2026-0073: Android adbd Authentication Bypass Weaponized Proof of Concept for the Wireless ADB TLS Auth Bypass vulnerability. Discovered by Barghest, Weaponized PoC by devtint. 📋 Overview CVE-2026-0073 is a critical cryptographic logic failure in the Android Debug Bridge daemon adbd that...

IOBitUnlockerUnlocker

Intro 0 day Moves or Copies any file. Bypasses previous patch with a checksum trick. Writup: https://nathan2.com/files/iobit.pdf Overall info: https://nathan2.com/posts/iobit/ I discovered this without knowing that this there was another previous exploit that discovered this first. However, this...

CVE-2026-0834

CVE-2026-0834 PoC TP-Link Device Debug Protocol TDDP Authentication Bypass CVE-2026-0834 Overview A vulnerability in the TDDP TP-Link Device Debug Protocol service allows unauthenticated remote attackers on the local network to execute administrative commands. When processing TDDPv2 packets, a...