Aggregator

A vulnerability identified as critical has been detected in Linux Kernel up to 6.1.166/6.6.129/6.12.77/6.18.18/6.19.8. This vulnerability affects the function buffer_list. The manipulation leads to buffer overflow. This vulnerability is traded as CVE-2026-43366. Access to the local network is required for this attack to succeed. There is no exploit available. You should upgrade the affected component.

A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. The affected element is the function remove_nh_grp_entry. The manipulation results in use after free. This vulnerability is known as CVE-2026-43374. Attacking locally is a requirement. No exploit is available. You should upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.12.77/6.18.18/6.19.8. It has been classified as critical. Affected by this vulnerability is the function btrfs_map_block of the component btrfs. Performing a manipulation results in privilege escalation. This vulnerability is identified as CVE-2026-43393. The attack can only be performed from the local network. There is not any exploit available. Upgrading the affected component is recommended.

看雪安卓班・火热报名中

​源码仓库遭黑，勒索团伙晒图示威。

看雪论坛作者ID：zhuzhu_biu

美国反恐战略重大转向：网络攻击“武器化”成新威慑手段

欧盟数据管控日渐严格，跨境传输数据必须审慎

速修复

速修复

A vulnerability categorized as critical has been discovered in 8421bit MiniClaw 0.8.0/0.9.0. This issue affects the function resolveSkillScriptPath of the file src/kernel.ts of the component System Command Handler. The manipulation results in os command injection. This vulnerability is cataloged as CVE-2026-8235. The attack must originate from the local network. Furthermore, there is an exploit available. It is best practice to apply a patch to resolve this issue.

欧洲心脏病学会等组织在《European Heart Journal》期刊上发表了一份临床共识声明：超加工食品会增加心血管死亡风险最高 65%，呼吁医生将食品加工视为一个风险因素，将其与营养素分离开来。超加工食品日益取代传统饮食，成为一大公共卫生问题。所谓超加工食品是用廉价工业原料、添加剂和新合成化合物组成的食品，通常营养价值较低甚至没有营养价值，它们通常高度加工含有可能对健康有害的添加剂。最近的证据表明，食品加工的程度和性质也是影响饮食与健康的重要因素。

Submit #809001 / VDB-362455

A vulnerability was found in EFM ipTIME A8004T 14.18.2. It has been rated as critical. This vulnerability affects the function formWifiBasicSet of the file /goform/WifiBasicSet. The manipulation of the argument security_5g leads to stack-based buffer overflow. This vulnerability is listed as CVE-2026-8234. The attack may be initiated remotely. In addition, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

Braintrust warned customers to rotate API keys after hackers breached an AWS account, exposing secrets tied to cloud-based AI models. AI observability startup Braintrust warned customers to rotate API keys after attackers gained unauthorized access to one of the company’s AWS accounts, potentially exposing secrets used to connect to cloud-based AI models. The company said […]

A vulnerability was found in Hikvision HikCentral Professional up to 3.0.1. It has been declared as critical. This affects an unknown part. Executing a manipulation can lead to improper access controls. This vulnerability is tracked as CVE-2026-1749. The attack can be launched remotely. No exploit exists.

A vulnerability was found in EZVIZ APP. It has been classified as problematic. Affected by this issue is some unknown functionality of the component Legacy API Interface. Performing a manipulation results in information disclosure. This vulnerability is identified as CVE-2026-32683. The attack can be initiated remotely. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability was found in Hikvision DS-3E1310P-SI, DS-3E1318P-SI and DS-3E1326P-SI and classified as critical. Affected by this vulnerability is an unknown functionality of the component Packets Handler. Such manipulation leads to improper input validation. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is referenced as CVE-2026-3828. It is possible to launch the attack remotely. No exploit is available.

A vulnerability has been found in Dotouch XproUPF 2.0.0-release-088aa7c4 and classified as critical. Affected is an unknown function of the component UPF. This manipulation causes improper access controls. The identification of this vulnerability is CVE-2026-8233. The attack needs to be done within the local network. There is no exploit available. The vendor was contacted early about this disclosure.

A vulnerability, which was classified as problematic, was found in Dotouch XproUPF 2.0.0-release-088aa7c4. This impacts the function vlib_worker_loop in the library /usr/xpro/upf/tools/libs/libvlib.so of the component UPF Process. The manipulation results in denial of service. This vulnerability was named CVE-2026-8232. The attack needs to be approached within the local network. There is no available exploit. The vendor was contacted early about this disclosure.