12 matches found
CVE-2025-26399
CVE-2025-26399 How does this detection method work? This script detects SolarWinds Web Help Desk instances vulnerable to CVE-2025-26399 by requesting the Helpdesk login page, confirming product identifiers in the response, extracting the embedded build token as a version string, and flagging...
Linux Distros Unpatched Vulnerability : CVE-2026-26399
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack-use-after-return issue exists in the ArduinoCoreSTM32 library prior to version 1.7.0. The pwmstart function allocates a TIMHandleTypeDef structure on th...
CVE-2026-26399
The Arduino_Core_STM32 library, within the stm32duino project and STMicroelectronics ecosystem, contains a stack-use-after-return vulnerability (CWE-562) in versions prior to v1.7.0 . The issue resides in the pwm_start() function (specifically in cores/arduino/stm32/analog.c), where a TIM_HandleT...
CVE-2026-26399
creationtimestamp| type| source ---|---|--- 2026-04-19 16:00:04+00:00| seen| https://t.me/GithubRedTeam/80975...
PT-2026-7491
A stack-use-after-return issue exists in the Arduino Core STM32 library prior to version 1.7.0. The pwm start function allocates a TIM HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the functi...
SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw
SolarWinds has released hot fixes to address a critical security flaw impacting its Web Help Desk software that, if successfully exploited, could allow attackers to execute arbitrary commands on susceptible systems. The vulnerability, tracked as CVE-2025-26399 CVSS score: 9.8, has been described ...
Exploit for CVE-2025-26399
CVE-2025-26399 How does this detection method work? This...
PT-2025-39120
Name of the Vulnerable Software and Affected Versions SolarWinds Web Help Desk versions prior to 2026.1 Description An unauthenticated remote code execution flaw exists in the 'AjaxProxy' component of SolarWinds Web Help Desk. The issue is caused by the deserialization of untrusted data, where...
CVE-2025-7313: Improper Restriction of Operations within the Bounds of a Memory Buffer
IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView CADImage Plugin. User interaction is required to exploit this vulnerability in that the...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...
