179307 matches found
info leak uploading over WebSockets with GnuTLS
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities
Summary IBM Guardium Data Protection has addressed these vulnerabilities in an update. Vulnerability Details CVEID:CVE-2026-31790 DESCRIPTION: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a...
Security update for glibc
This update for glibc fixes the following issues: CVE-2026-8674: reachable assert in resolv/resolvconf.c:updatefromconf allows an attacker in a local network to trigger a process crash bsc1281297. CVE-2026-86805: TOCTOU race condition in the dynamic loader allows local attackers to escalate...
EUVD-2026-100898
Koha is vulnerable to SQL injection in the Most-circulated items report. The reports/catissuestop.pl script sub calculate concatenates the user-controlled Criteria, Filter, and Limit request parameters directly into dynamic SQL. Criteria is only prefix-normalized and never validated against an...
CVE-2026-107508
The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attackers to include and read arbitrary local files, including the WordPress configuration file...
RLSA-2026:81532 Important: pcre2 security update
The pcre2 package contains a new generation of the Perl Compatible Regular Expression libraries for implementing regular expression pattern matching using the same syntax and semantics as Perl. Security Fixes: pcre2: PCRE2: Out-of-bounds write allows arbitrary code execution via crafted regular...
pcre2 security update
An update is available for pcre2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The pcre2 package contains a new generation of the Perl Compatible Regular...
RLSA-2026:82345 Important: OpenEXR security update
OpenEXR is a high dynamic-range HDR image file format developed by Industrial Light & Magic for use in computer imaging applications. This package contains libraries and sample applications for handling the format. Security Fixes: OpenEXR: OpenEXR: Out-of-bounds write vulnerability via crafted EX...
OpenEXR security update
An update is available for OpenEXR. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenEXR is a high dynamic-range HDR image file format developed by Industrial...
CVE-2026-89288
The Fast Courier WordPress plugin (versions 5.0.0-5.2.3 ) is vulnerable to SQL injection because it fails to sanitize and escape a value used in a SQL query on an unauthenticated REST route . Specifically, the vulnerability is triggered via the 'wp_order_id' parameter. An unauthenticated attacker...
EUVD-2026-100860
The Fast Courier WordPress plugin before 5.2.4 does not sanitize and escape a value before using it in a SQL query on an unauthenticated REST route, allowing unauthenticated attackers to perform SQL injection and read arbitrary data from the database...
CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
UBUNTU-CVE-2026-107928
When curl is built with GnuTLS, a malicious WebSocket server can make curl send memory past its send buffer. This is due to an out of bounds read following when gnutlsrecordsend returns a number of bytes sent greater than the number of bytes it was given to send. GnuTLS does that after a blocked...
DsArk64
DsArk64 DsArk64.sys ships with 360 Total Security. WHQL-signed by Microsoft. LOLDrivers: magicsword-io/LOLDrivers308. CVE: Requested MITRE. Primitives Process kill ring 0 IOCTL 0x80863008, input: 4-byte raw PID Driver calls ZwOpenProcessALLACCESS + ZwTerminateProcess from kernel No encryption on...
CVE-2025-64720-PoC
CVE-2025-64720: libpng Buffer Overflow in Palette Premultiplication Status : Patched Severity : High CVE ID : CVE-2025-64720 Discovery Date : 2025-11-XX Public Disclosure : 2025-11-21 Overview Summary An out-of-bounds read vulnerability exists in libpng's pngimagereadcomposite function when...
MGASA-2026-0505 Updated freeciv package fixes security vulnerabilities
Freeciv before 3.2.6 Heap Buffer Overflow via worklistload. CVE-2026-90556 Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame. CVE-2026-90557...
MGASA-2026-0503 Updated mingw-gdk-pixbuf package fixes security vulnerabilities
out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...
Updated mingw-gdk-pixbuf package fixes security vulnerabilities
out-of-bounds read in ico parser. CVE-2026-16768 Invalid write in jpeg icc profile parser on error recovery. CVE-2026-81893...
CVE-2025-56499
CVE-2025-56499 Arbitrary File Read via Missing Path Validation in Local Rule Provider Upstream Fix: https://github.com/MetaCubeX/mihomo/pull/2177 Affected Versions: mihomo = v1.19.11 Summary When parsing rule-providers configuration, the type = "file" branch fails to validate the supplied path. A...
CVE-2025-2539---File-Away-WordPress-Plugin-Arbitrary-File-Read
CVE-2025-2539 - File Away WordPress Plugin Arbitrary File Read 📋 Executive Summary CVE ID: CVE-2025-2539 Plugin: File Away Versions = 3.9.9.0.1 Vulnerability Type: Authenticated Arbitrary File Read CVSS Score: 8.5 High Exploit Availability: Public PoC Available Impact: Unauthorized file disclosur...