679 matches found
Amazon Linux 2023 : libsoup3, libsoup3-devel (ALAS2023-2026-1393)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-1393 advisory. A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an...
RHEL 9 : libsoup (RHSA-2026:2049)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2049 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Signed to Unsigned Conversion Error Leadi...
RHEL 10 : libsoup3 (RHSA-2026:2182)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2182 advisory. Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup,...
RHEL 9 : libsoup (RHSA-2026:2005)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:2005 advisory. The libsoup packages provide an HTTP client and server library for GNOME. Security Fixes: libsoup: Signed to Unsigned Conversion Error Leadi...
Amazon Linux 2 : libsoup, --advisory ALAS2-2026-3141 (ALAS-2026-3141)
The version of libsoup installed on the remote host is prior to 2.56.0-6. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3141 advisory. A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for...
openSUSE 16 Security Update : libsoup (openSUSE-SU-2026:20142-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20142-1 advisory. - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer...
Security update for libsoup (important)
openSUSE security update: security update for libsoup ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:20142-1 Rating: important References: bsc1250562 bsc1256399 bsc1256418 Cross-References: CVE-2025-11021 CVE-2026-0716 CVE-2026-0719 CVSS scores:...
OPENSUSE-SU-2026:20142-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...
SUSE-SU-2026:20205-1 Security update for libsoup
This update for libsoup fixes the following issues: - CVE-2025-11021: Fixed out-of-bounds read in Cookie Date Handling of libsoup HTTP Library bsc1250562. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication can lead to arbitrary code execution bsc1256399. - CVE-2026-0716:...
SUSE SLES12: libsoup-2_4-1 / libsoup-2_4-1-32bit / libsoup-devel / libsoup-lang / etc (SUSE-SU-2026:0265-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:0265-1 advisory. - CVE-2026-0719: Fixed stack-based buffer overflow in NTLM authentication bsc1256399. Tenable has extracted the preceding description block directly fr...
MiracleLinux 4 : stunnel-4.29-3.AXS4 (AXSA:2013-374:01)
The remote MiracleLinux 4 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2013-374:01 advisory. Stunnel is a socket wrapper which can provide SSL Secure Sockets Layer support to ordinary applications. For example, it can be used in conjunction with imapd...
MiracleLinux 4 : wireshark-1.2.15-2.AXS4.1 (AXSA:2012-539:02)
The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2012-539:02 advisory. Wireshark is a network traffic analyzer for Unix-ish operating systems. This package lays base for libpcap, a packet capture and filtering library,...
CVE-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2020-24772
In Dreamacro Clash for Windows v0.11.4, an attacker could embed a malicious iframe in a website with a crafted URL that would launch the Clash Windows client and force it to open a remote SMB share. Windows will perform NTLM authentication when opening the SMB share and that request can be relaye...
CVE-2026-0719
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in...
CVE-2026-0719 Libsoup: signed to unsigned conversion error leading to stack-based buffer overflow in libsoup ntlm authentication
A flaw was identified in the NTLM authentication handling of the libsoup HTTP library, used by GNOME and other applications for network communication. When processing extremely long passwords, an internal size calculation can overflow due to improper use of signed integers. This results in...
SMBInvader
SMBInvader This script automates the...
EUVD-2006-0149
Malware in sbrugna...