fil-c v0.685

Fil-C 0.686 Fil-C is a fanatically compatible memory-safe implementation of C and C++. Lots of software compiles and runs with Fil-C with zero or minimal changes. All memory safety errors are caught as Fil-C panics. Fil-C achieves this using a combination of concurrent garbage collection and...

CVE-2026-8674: Reachable Assertion

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-93393: Out-of-bounds Write

A heap-based buffer overflow exists in the TLS transport layer of the MongoDB C Driver when built with the Windows platform TLS backend. A remote endpoint that the client connects to can cause the driver to write uncontrolled data outside the bounds of a heap allocation while processing incoming...

CVE-2026-93167: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: csky: Fix a4/a5 restoration in syscall trace path The syscall trace path reloads syscall arguments from ptregs before calling the syscall handler. On C-SKY ABIv2, the 5th and 6th syscall arguments are prepared as stack arguments...

PT-2026-95018

Name of the Vulnerable Software and Affected Versions GNU C Library versions 2.26 through 2.44 Description Initializing the DNS stub resolver using a LOCALDOMAIN environment variable or an /etc/resolv.conf file containing a search list with a domain of approximately 200 characters or more causes ...

CVE-2026-44235: Out-of-bounds Read

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned sizet underflow in amqphandleinput in librabbitmq/amqpconnection.c. The parser subtracts HEADERSIZE, fixed...

RHEL 9 : RHELAI 3.6: mariadb-connector-c 3.4.9 CVE-2026-44172 (Critical) (RHSA-2026:68567)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:68567 advisory. RPM packages are internal build artifacts and not supported on their own. They are only supported as part of the Red Hat AI application platform...

CVE-2026-44236: Heap-based Buffer Overflow

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...

SindriKit v2.0.0

SindriKit Offensive Development Deserves Better Architecture. A C library for building offensive capabilities. Core Concept Most offensive utilities hardcode their execution mechanics inside the technique's logic. A reflective loader doesn't just map an image; it maps it using a specific, hardcod...

PT-2026-93658

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the rtw action frame parse function within the rtl8723bs staging driver. The function accepts a frame len parameter but fails to validate it before indexi...

CVE-2026-90017: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB read in rtwactionframeparse rtwactionframeparse takes a framelen parameter but never actually checks it before indexing into the frame body: const u8 framebody = frame + sizeofstruct ieee80211hdr3addr;...

ROS-20260916-73-0064

The vulnerability of the hnsroceHWv2.c component in the Linux operating system is related to improper synchronization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260916-73-0079

The vulnerability of the functions ioam6fillTraceData and ioam6fillTraceData in the net/ipv6/ioam6.c module of the Linux operating system is related to integer overflow. Exploitation of this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibilit...

Linux Distros Unpatched Vulnerability : CVE-2026-90026

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: typec: qcom-pmic: cancel resetwork on stop pdphystop disables IRQs but leaves resetwork pending. If the IRQ handler schedules it just before disableirq, th...

CVE-2026-90026: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: usb: typec: qcom-pmic: cancel resetwork on stop pdphystop disables IRQs but leaves resetwork pending. If the IRQ handler schedules it just before disableirq, the work runs after remove frees the struct via devm. Call cancelworksy...

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

CVE-2026-51133

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

CVE-2026-55301

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58767

A logic error in multiple functions of arm-smmu-v3.c allows for a local escalation of privilege . An attacker with System execution privileges can exploit this vulnerability to escalate privileges further. No user interaction is required for exploitation. Specific details regarding affected versi...

CVE-2026-58767

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...