SUSE SLES12 Security Update : giflib (SUSE-SU-2026:1005-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1005-1 advisory. - CVE-2026-23868: double-free result of a shallow copy can lead to memory corruption bsc1259502. Tenable has extracted the preceding descriptio...

CVE-2026-27784

A flaw was found in NGINX Open Source, specifically within the ngxhttpmp4module. An attacker can exploit this memory corruption vulnerability by providing a specially crafted MP4 file. This can lead to an over-read or over-write of NGINX worker memory, causing the worker to terminate and resultin...

CVE-2026-2588 Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems

Crypt::NaCl::Sodium versions through 2.001 for Perl has an integer overflow flaw on 32-bit systems. Sodium.xs casts a STRLEN sizet to unsigned long long when passing a length pointer to libsodium functions. On 32-bit systems sizet is typically 32-bits while an unsigned long long is at least 64-bi...

PT-2026-7679

Torrent FLV Converter 1.51 Build 117 contains a stack overflow vulnerability that allows attackers to overwrite Structured Exception Handler SEH through a malicious registration code input. Attackers can craft a payload with specific offsets and partial SEH overwrite techniques to potentially...

Azure Linux 3.0 Security Update: kernel (CVE-2025-22080)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-22080 advisory. - In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-002831)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002831 advisory. The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve'ed with 1GB of arguments or environmental strings the...

libtasn1-6-32bit-4.21.0-1.1 on GA media (moderate)

libtasn1-6-32bit-4.21.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:10033-1 Rating: moderate Cross-References: CVE-2025-13151 CVSS scores: CVE-2025-13151 SUSE : 6.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H CVE-2025-13151 SUSE : 6.9...

curl: Security hardening: missing integer overflow check in curl_load_library()

Summary A missing integer overflow check was identified in lib/systemwin32.c::curlloadlibrary when calculating the buffer size for a DLL path. On 32-bit Windows builds, the unchecked size calculation can wrap around, resulting in an undersized heap allocation followed by unbounded string copies v...

EUVD-2024-55350

Dormakaba Saflok System 6000 contains a predictable key generation algorithm that allows attackers to derive card access keys from a 32-bit unique identifier. Attackers can exploit the deterministic key generation process by calculating valid access keys using a simple mathematical transformation...

Microsoft Excel 安全漏洞

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel due to an untrusted pointer dereference flaw. An attacker could exploit the vulnerability to execute arbitrary code on the system...

📄 libxml2 2.9.14 (2022) Heap Buffer Overflow

libxml2 version 2.9.14 2022 proof of concept exploit for a heap buffer overflow in the xmlRegEpxFromParse function in xmlregexp.c. ============================================================================================================================================= | Title : libxml2 2.9.14...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989257)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989257 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: scsidebug: Fix type in mint to avoid stack OOB Change mint to use type u32 instead of type...

libtiff-devel-32bit-4.7.1-2.1 on GA media (moderate)

libtiff-devel-32bit-4.7.1-2.1 on GA media Announcement ID: openSUSE-SU-2025:15635-1 Rating: moderate Cross-References: CVE-2025-9900 CVSS scores: CVE-2025-9900 SUSE : 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-9900 SUSE : 8.5...

EUVD-2017-6723

Malware in sbrugna...

EUVD-2017-7348

Malware in sbrugna...

EUVD-2017-6699

Malware in sbrugna...

EUVD-2004-1142

Malware in sbrugna...

EUVD-2017-7347

Malware in sbrugna...

EUVD-2016-9462

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414582)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414582 advisory. It was discovered that the eBPF implementation in the Linux kernel did not properly track bounds information for 32 bit registers when performing div and mod...