CVE-2021-31630

OpenPLC WebServer v3 - Аутентифицированное удаленное выполнение кода CVE-2021-31630 Этот эксплойт основан на эксплойте с Exploit-DB от Fellipe Oliveira. Сначала аутентифицируйтесь Загрузите вредоносный C-файл Скомпилируйте его Запустите ПЛК инициируйте reverse shell Остановите ПЛК нет необходимос...

Astra Linux – Vulnerability in OpenVSwitch

It has been discovered that openvswitch 2.17.8 contains a memory leak due to the xmalloc function in openvswitch-2.17.8/lib/util.c...

Astra Linux – Vulnerability in zziplib

A Stack Buffer Overflow vulnerability in zziplibv 0.13.77 allows attackers to cause a denial of service through the zzipFetchDiskTrailer function located in the /zzip/zip.c file...

DEBIAN-CVE-2026-17513

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

CVE-2026-17513

CVE-2026-17513 affects ggml-org whisper.cpp; the issue lies in ggml_ftype_to_ggml_type in ggml/src/ggml.c where manipulation of the ftype argument leads to a reachable assertion. Reportedly requires local access; the project was informed via an issue but has not responded. No remediation or explo...

PT-2026-61000

Name of the Vulnerable Software and Affected Versions rt-claw versions prior to 0.2.1 Description An information disclosure issue exists in the http request component. A remote attacker can manipulate the claw net get and claw net post functions within the claw/services/tools/net.c file to disclo...

CVE-2026-40469 Heap buffer overflow in gawk

Integer overflow vulnerability has been found in "builtin.c" program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

The vulnerability of the lapbeth_get_x25_dev() function in the drivers/net/wan/lapbether.c module of the Linux kernel network device driver allows a hacker to cause a service failure.

The vulnerability of the lapbethgetx25dev function in the drivers/net/wan/lapbether.c module of the Linux kernel network device driver is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-47240

A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the component Pattern Handler. This manipulation causes inefficient regular expression complexity. The attack is restricted to local...

EUVD-2026-31740

A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available an...

The vulnerability of the special_keys() function in the src/netbeans.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the specialkeys function in the src/netbeans.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the get_tagfname() function in the src/tag.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the gettagfname function in the src/tag.c file of the Vim text editor is related to buffer overflows during the processing of the helpfile parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

ROS-20260403-73-0031

A vulnerability in the mips/kernel/process.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

CVE-2026-4745

CVE-2026-4745 is an Arbitrary Code Execution in dendibakh perf-ninja (labs/misc/pgo/lua modules) linked to the vulnerable program file ldo.C. The issue arises from improper generation of code (Code Injection) in perf-ninja, affecting the Lua-related components. The CVSS 4.0 base score is 10.0 (CR...

CVE-2026-4737 Use-After-Free Vulnerability in No-Chicken/Echo-Mate

Use After Free vulnerability in No-Chicken Echo-Mate ‎SDK/rv1106-sdk/sysdrv/source/kernel/mm modules. This vulnerability is associated with program files rmap.C‎. This issue affects Echo-Mate: before V250329...

CVE-2026-4737

CVE-2026-4737 is a Use-After-Free in No-Chicken Echo-Mate affecting the SDK/rv1106-sdk/sysdrv/source/kernel/mm modules, specifically in rmap.C. Affected: Echo-Mate prior to version V250329. Root cause: memory management issue in the mm components. CVSS metrics indicate LOCAL attack vector, HIGH i...

CVE-2026-4731 An Integer Overflow Vulnerability in artraweditor/ART

Integer Overflow or Wraparound vulnerability in artraweditor ART ‎rtengine‎ modules. This vulnerability is associated with program files dcraw.C. This issue affects ART: before 1.25.12...