MATLOCK.CA
30Articles
6Categories
2026-01-03Date
🐛
CVE-2025-61103 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_lan_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61107 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LSA Update packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61102 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_adj_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61100 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the ospf_opaque_lsa_dump function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) under specific malformed LSA conditions.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61106 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_pref_pref_sid function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61101 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_ext_link_rmt_itf_addr function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61104 FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show_vty_unknown_tlv function at ospf_ext.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted OSPF packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61099 FRRouting/frr from v2.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the opaque_info_detail function at ospf_opaque.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted LS Update packet.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-32387 Helm Allows A Specially Crafted JSON Schema To Cause A Stack Overflow
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2024-45310 runc can be confused to create empty files/directories on the host
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-68146 filelock has TOCTOU race condition that allows symlink attacks during lock file creation
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-34468 libcoap Stack-Based Buffer Overflow in Address Resolution DoS or Potential RCE
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-11961 OOBR and OOBW in pcap_ether_aton() in libpcap
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-11964 OOBW in utf_16le_to_utf_8_truncated() in libpcap
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-69277 libsodium before ad3004e, in atypical use cases involving certain custom cryptography or untrusted data to crypto_core_ed25519_is_valid_point, mishandles checks for whether an elliptic curve point is valid because it sometimes allows points that aren't in the main cryptographic group.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-15284 arrayLimit bypass in bracket notation allows DoS via memory exhaustion
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-61594 URI Credential Leakage Bypass over CVE-2025-27221
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2023-52969 MariaDB Server 10.4 through 10.5.*, 10.6 through 10.6.*, 10.7 through 10.11.*, and 11.0 through 11.0.* can sometimes crash with an empty backtrace log. This may be related to make_aggr_tables_info and optimize_stage2.
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-2912 HDF5 H5Omessage.c H5O_msg_flush heap-based overflow
MSRC.MICROSOFT.COM — 03 Jan 2026
🐛
CVE-2025-2295 Potential iSCSI R2T PDU Vulnerability
MSRC.MICROSOFT.COM — 03 Jan 2026
⚠️
I Found a Secret Hacker Team Fighting Cybercrime (they saved $1 billion) | video by NetworkChuck [26:56]
PROGRAMMING.DEV — 3 Jan 2026
⚠️
Mapping Cloud Vulnerabilities
YOUTUBE.COM — 2026-01-03
🔥
Finnish Authorities Arrest Two Sailors in Probe Into Undersea Cable Disruption
GBHACKERS.COM — 03 Jan 2026
🔥
ShinyHunters claims Resecurity hack, firm says it’s a honeypot
BLEEPINGCOMPUTER.COM — 03 Jan 2026
🔥
Hackers claim to hack Resecurity, firm says it was a honeypot
BLEEPINGCOMPUTER.COM — 03 Jan 2026
🕵️
President Trump Orders Divestment in $2.9 Million Chips Deal to Protect US Security Interests
SECURITYWEEK.COM — 03 Jan 2026
🕵️
The Kimwolf Botnet is Stalking Your Local Network
INFOSEC.PUB — 3 Jan 2026
🎙️
Final Encore Episode - Research, Cybersecurity Awareness and Training
CYBERSECURITYTODAY.LIBSYN.COM — 03 Jan 2026
📡
Bitfinex hacker Ilya Lichtenstein credits Trump for early release from prison
TECHCRUNCH.COM — 03 Jan 2026
📡
California residents can use new tool to demand brokers delete their personal data
TECHCRUNCH.COM — 03 Jan 2026