PT-2026-81199

OpenBSD before commit 1ee99df contains an inverted comparison vulnerability in the ieee80211 michael mic failure function within sys/net80211/ieee80211 crypto tkip.c that allows unauthenticated attackers within RF range to trigger denial of service by sending two malformed TKIP frames separated b...

PT-2026-81209

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description A buffer overflow exists in the nfs read reply function within the net/nfs-common.c file. A malicious NFS server can exploit signed integer handling to bypass length validation by providing...

PT-2026-81204

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81200

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81201

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81214

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds memory access exists in the dhcp6 parse options function. The issue occurs because the system fails to validate the lengths of the SERVERID and CLIENTID options within DHCPv6...

PT-2026-81210

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description A buffer overflow exists in the nfs readlink reply function within net/nfs-common.c during the processing of NFS server responses. A malicious NFS server can trigger this by sending crafted...

PT-2026-81213

My two cents is that this democratises AI-availability and Privacy. Doom on hardware Y is an existence proof and dies there! For fulfilling your curiosity running a glm-5.1 UD-IQ1 M on one Mac studio M3 ultra plus a iogpu sysctl made us at byteray CVE-2026-55706 a 27-year old bug on OpenBSD just ...

PT-2026-81207

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs read directory table function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablks count value that causes heap buffer under-allocation...

PT-2026-81208

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read slotted partition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

PT-2026-81205

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc3 Description An out-of-bounds write occurs in the net defragment function within net/net.c when CONFIG IP DEFRAG is enabled. Remote attackers can trigger this by sending a crafted IP fragment with a non-zero...

PT-2026-81211

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description A use-after-free issue exists in the lwIP wget implementation. In the httpc recv cb function, when HTTP data storage fails, the callback frees the connection PCB Protocol Control Block but retur...

PT-2026-81206

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds write exists in the RLE8 bitmap decoder within the video subsystem. The video display rle8 bitmap function in drivers/video/video bmp.c decodes run-length encoded streams direct...

mod_http2 security, bug fix, and enhancement update

2.0.26-6.2 - Resolves: RHEL-190583 - address CVE-2026-43951 and CVE-2026-48913 in modhttp2...

claude-bug-bounty

BugHunter صيد مكافآت الاختراق مدعوم بالذكاء الاصطناعي — من الاستطلاع إلى التقرير، داخل جهازك الطرفي. إعداد مجاني · بدء سريع · الأوامر · ما يجده · التثبيت · الأسئلة الشائعة !BUGHUNTER — خط أنابيب أتمتة مكافآت...

Important: Red Hat Security Advisory: RHACS 4.11.3 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: RHACS 4.10.7 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

Important: Red Hat Security Advisory: RHACS 4.9.11 security and bug fix update

Updated images are now available for Red Hat Advanced Cluster Security RHACS, which typically include new features, bug fixes, and/or security patches. See the release notes link in the references section for a description of the fixes and enhancements in this particular release...

CVE-2020-37268

Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type. Applying a functor inlines the body of the parameter, and the inlining drops the record that the term was built...

CVE-2020-37268 Coq and Rocq Prover Print Assumptions Omits Unsafe Universe Checking Inlined Through Parameter Inline

Print Assumptions does not report that a definition was produced while universe checking was disabled when that definition reaches the caller through Parameter Inline in a module type. Applying a functor inlines the body of the parameter, and the inlining drops the record that the term was built...