CVE-2026-4179: Loop with Unreachable Exit Condition

Issues in stm32 USB device driver drivers/usb/device/usbdcstm32.c can lead to an infinite while loop...

Radare2 security vulnerabilities

Radare2 is an open-source reverse framework for Unix geeks developed by Radare. Version 5.9.9 of Radare2 contains a security vulnerability, which stems from incorrect operations on the function walkexportstrie found in the file libr/bin/format/mach0/mach0.c, potentially leading to resource...

Exploit for Race Condition in Canonical Ubuntu_Linux

Privilege Escalation using the Dirty Cow Kernel Exploit By...

[SECURITY] Fedora 42 Update: dr_libs-0^20241216git660795b-4.fc42

Single-file audio decoding libraries for C/C++...

Linux Distros Unpatched Vulnerability : CVE-2026-3904

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling NSS-backed functions that support caching via nscd may call the nscd client side code and in the GNU C Library version 2.36 under high load on x8664...

PT-2026-36364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access can occur in the ucsi connector change function. This happens because the connector number extracted from the Command Completion Interface CCI via UCSI CCI...

Stack-based Buffer Overflow

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

iflow-mcp-c-bjorn-megamem (1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (0.22.0)

graphiti-core PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem 1.2.5 Source cves: CVE-2026-32247 Source advisory: MEND:CVE-2026-32247...

iflow-mcp-c-bjorn-megamem (1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (0.22.0)

graphiti-core PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem 1.2.5 Source cves: CVE-2026-32247 Source advisory: SNYK:PYTHON-GRAPHITICORE-15627260...

iflow-mcp-c-bjorn-megamem (1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (0.22.0)

graphiti-core PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem 1.2.5 Source cves: CVE-2026-32247 Source advisory: OSV:GHSA-GG5M-55JJ-8M5G...

iflow-mcp-c-bjorn-megamem (1.2.5) potentially affected by CVE-2026-32247 via graphiti-core (0.22.0)

graphiti-core PYPI version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on graphiti-core and may be impacted: - iflow-mcp-c-bjorn-megamem 1.2.5 Source cves: CVE-2026-32247 Source advisory: GHSA-GG5M-55JJ-8M5G...

CVE-2026-27940

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...

CVE-2026-27940 llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the ggufinitfromfileimpl in gguf.cpp is vulnerable to an Integer overflow, leading to an undersized heap allocation. Using the subsequent fread writes 528+ bytes of attacker-controlled data past the buffer boundary. This is...

EUVD-2026-11571

The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions up to, and including, 20260217 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

binary-exploitation

binary-exploitation A collection of binary exploitation...

Important: Red Hat Security Advisory: A Subscription Management tool for finding and reporting Red Hat product usage

A Subscription Management tool for finding and reporting Red Hat product usage Red Hat Discovery, also known as Discovery, is an inspection and reporting tool that finds, identifies, and reports environment data, or facts, such as the number of physical and virtual systems on a network, their...

CVE-2026-2987

The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions up to, and including, 20260217 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

CVE-2026-2987

The CVE-2026-2987 entry concerns the WordPress plugin Simple Ajax Chat. A Stored Cross-Site Scripting (Stored XSS) flaw exists via the c parameter in versions up to and including 20260217, caused by insufficient input sanitization and output escaping. This enables unauthenticated attackers to inj...

CVE-2026-2987 Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'

The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions up to, and including, 20260217 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...

CVE-2026-2987 Simple Ajax Chat <= 20260217 - Unauthenticated Stored Cross-Site Scripting via 'c'

The Simple Ajax Chat plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'c' parameter in versions up to, and including, 20260217 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts ...