425 matches found
CVE-2026-41089-Netlogon-RCE
🚨 CVE-2026-41089: RCE Crítico en Windows Netlogon Ejecución Remota de Código No Autenticada en Controladores de Dominio de Active Directory 🧠 Visión General Conceptual Publico este desglose técnico de CVE-2026-41089 , una vulnerabilidad excepcionalmente crítica que reside en lo más profundo del...
CVE-2026-9997-VPN-Split-Tunneling-Bypass-via-DHCP-Option-Injection
CVE-2026-9997 – VPN Split‑Tunneling Bypass via DHCP Option Injection Program Code Python simulated DHCP server + client root@kitploit: !/usr/bin/env python3 roguedhcpserver.py - Injects a static route to bypass VPN split tunnel import socket, struct, threading def senddhcpofferclientmac, offerip:...
CVE-2025-69720
CVE-2025-69720: ncurses infocmp -i Stack Buffer Overflow CWE-121 Reporter: Yixuan Cao Shenzhen University, [email protected] Environment Host: openEuler 22.03 LTS Linux aarch64 Toolchain: system clang 12.0.1 + AddressSanitizer Source: ncurses-6.4 and ncurses-6.5 prior to patch 20251213 Summa...
CVE-2025-60751
CVE-2025-60751: GeographicLib Stack-based Buffer Overflow 📌 This repository contains the analysis and technical documentation of vulnerability CVE-2025-60751 , a stack-based buffer overflow flaw located in the C++ library GeographicLib. 📝 Description The vulnerability is located in the function...
Adobe Substance 3D Sampler <= 6.0.1 Multiple Arbitrary Code Execution Vulnerabilities (APSB26-121)
The version of Adobe Substance 3D Sampler installed on the remote host is prior or equal to 6.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-121 advisory. - Substance3D - Sampler is affected by an out-of-bounds write vulnerability that could result in...
Astra Linux – Vulnerability in Firefox
The element could have been manipulated to display content outside of a sandboxed iframe. This could allow untrusted content to be displayed under the guise of trusted content. This vulnerability affects Firefox versions earlier than 121...
Astra Linux – Vulnerability in Firefox, Thunderbird
VideoBridge allows any content process to use textures generated by remote decoders. This could be exploited to bypass the sandbox. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
Astra Linux – Vulnerability in Firefox and Thunderbird
The WebGL DrawElementsInstanced method was vulnerable to a heap buffer overflow when used on systems with the Mesa VM driver. This issue could allow an attacker to perform remote code execution and sandbox escape. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
Astra Linux – Vulnerability in Firefox
TypedArrays can be flawed, and they lack proper exception handling. This could lead to abuse in other APIs that expect TypedArrays to always succeed. This vulnerability affects Firefox versions less than 121...
Astra Linux – Vulnerability in Firefox and Thunderbird
Memory safety bugs exist in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs exhibited signs of memory corruption, and we assume that with sufficient effort, some of these bugs could have been exploited to execute arbitrary code. This vulnerability affects Firefox ESR...
Astra Linux – Vulnerability in Firefox
GNOME was leaking browser tab titles into system logs. This could potentially expose users’ browsing habits when they are using private tabs. This vulnerability affects Firefox versions earlier than 121...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in the Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data through a crafted Chrome Extension. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Integer underflow in WebUI of Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. Chromium security severity: High...
Astra Linux – Vulnerability in Firefox and Thunderbird
Firefox was vulnerable to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird 115.6, and Firefox 121...
Astra Linux – Vulnerability in Firefox
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox versions earlier than 121...
Security Bulletin: This Power System update is being released to address CVE-2026-19234
Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...
CVE-2026-63387
libevent <2.1.13 and
OESA-2026-3415 gimp security update
The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...
