Aggregator

OpenTelemetry-Go 的 OTLP 日志 gRPC 导出器（go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc，受影响区间 v0.5.0–v0.20.0，官方口径 < v0.21.0）会把 OTEL_EXPORTER_OTLP_LOGS_CERTIFICATE 这组环境变量完整解析进 cfg.tlsCfg——根 CA、

A vulnerability was found in Linux Kernel up to 6.6.116/6.12.57/6.17.7. It has been classified as critical. The affected element is the function in_atomic of the file kernel/locking/mutex.c. This manipulation causes stack-based buffer overflow. The identification of this vulnerability is CVE-2025-68320. The attack needs to be done within the local network. There is no exploit available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Linux Kernel up to 5.15.196/6.1.158/6.6.116/6.12.57/6.17.7. Affected is the function page_pool. The manipulation leads to allocation of resources. This vulnerability is listed as CVE-2025-68321. The attack must be carried out from within the local network. There is no available exploit. You should upgrade the affected component.

A vulnerability described as critical has been identified in Linux Kernel up to 6.6.118/6.12.60/6.17.10. This vulnerability affects the function gs_usb_receive_bulk_callback of the component can. Executing a manipulation can lead to privilege escalation. This vulnerability is handled as CVE-2025-68342. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

A vulnerability labeled as critical has been found in Linux Kernel. The affected element is the function pd_free_fn. The manipulation results in improper update of reference count. This vulnerability is cataloged as CVE-2023-54107. The attack must originate from the local network. There is no exploit available. It is advisable to implement a patch to correct this issue.

A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.62/6.17.12/6.18.1. This affects the function rxe_srq_chk_attr. Performing a manipulation results in null pointer dereference. This vulnerability is identified as CVE-2025-68379. The attack can only be performed from the local network. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.17.12/6.18.1 and classified as critical. This vulnerability affects unknown code of the component staging. Such manipulation leads to null pointer dereference. This vulnerability is listed as CVE-2025-68755. The attack must be carried out from within the local network. There is no available exploit. It is suggested to upgrade the affected component.

A vulnerability was found in Linux Kernel up to 6.6.119/6.12.63/6.18.2. It has been declared as critical. Affected by this issue is the function ksmbd_query_inode_status of the file vfs_cache.c of the component ksmbd. Such manipulation leads to state issue. This vulnerability is uniquely identified as CVE-2025-68809. The attack can only be initiated within the local network. No exploit exists. It is recommended to upgrade the affected component.

A vulnerability labeled as critical has been found in Linux Kernel up to 6.12.63/6.18.2/6.19-rc1. This issue affects the function alps_reconnect. Executing a manipulation can lead to use after free. This vulnerability is registered as CVE-2025-68822. The attack requires access to the local network. No exploit is available. The affected component should be upgraded.

A vulnerability was found in Linux Kernel up to 6.6.119/6.12.63/6.18.2/6.19-rc2. It has been rated as critical. This affects the function rq_pages of the component svcrdma. Performing a manipulation results in allocation of resources. This vulnerability was named CVE-2025-71068. The attack needs to be approached within the local network. There is no available exploit. Upgrading the affected component is advised.

A vulnerability was found in Linux Kernel up to 6.18.1. It has been classified as critical. This impacts the function qlt_free_cmd of the component qla2xxx. This manipulation causes denial of service. This vulnerability is handled as CVE-2025-68745. The attack can only be done within the local network. There is not any exploit available. Upgrading the affected component is recommended.

长安杯 计算机部分 writeup

A vulnerability, which was classified as problematic, has been found in Roost Coop up to 0.x. Affected by this vulnerability is the function Query.allOrgs of the file /api/v1/graphql of the component GraphQL API. This manipulation of the argument usersWhoCanReviewEveryQueue causes improper access controls. This vulnerability is handled as CVE-2026-63396. The attack can be initiated remotely. There is not any exploit available. It is advisable to upgrade the affected component.

A vulnerability classified as critical was found in Roostorg Coop up to 1.0.1. Affected is the function resetPasswordForToken. The manipulation results in session expiration. This vulnerability is known as CVE-2026-63400. It is possible to launch the attack remotely. No exploit is available. Upgrading the affected component is advised.

A vulnerability classified as problematic has been found in Roost Coop up to 1.0.1. This impacts the function kyselyUserFindByEmail of the file /saml/login/:orgId/callback of the component SAML Strategy. The manipulation leads to improper authentication. This vulnerability is traded as CVE-2026-63398. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability described as problematic has been identified in i18next up to 26.3.3. This affects the function deepExtend of the file src/utils.js of the component Deep Merge. Executing a manipulation of the argument deep/overwrite can lead to dynamically-managed code resources. This vulnerability appears as CVE-2026-63402. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability marked as critical has been reported in ROOST Coop up to 0.x. The impacted element is the function Mutation.createOrg of the component Mutation. Performing a manipulation results in improper privilege management. This vulnerability is reported as CVE-2026-63399. The attack is possible to be carried out remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability labeled as problematic has been found in roostorg Coop up to 1.0.1. The affected element is the function addAccessibleQueuesForUser/removeAccessibleQueuesForUser. Such manipulation of the argument queueId/userId leads to permission issues. This vulnerability is documented as CVE-2026-63401. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability identified as problematic has been detected in sgbett secp256k1-native up to 0.17.x. Impacted is the function Point#mul/scalar_multiply_ct of the file extconf.rb of the component Montgomery ladder. This manipulation causes observable timing discrepancy. This vulnerability is registered as CVE-2026-63410. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.