RockyLinux 10 : freerdp (RLSA-2026:2222)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:2222 advisory. freerdp: FreeRDP: Heap buffer overflow leading to denial of service and potential code execution from a malicious server. CVE-2026-23530 freerdp: FreeRD...

motionEye 0.43.1b4 - RCE

Exploit Title: motionEye 0.43.1b4 - RCE Exploit PoC: motionEye RCE via client-side validation bypass safe PoC Filename: motioneyercepocedb.txt Author: prabhatverma47 Date tested: 2025-05-14 original test; prepared for submission: 2025-10-11 Affected Versions: motionEye = 0.43.1b4 Tested on: Debia...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

CVE-2026-0965

A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service DoS by causing the system t...

CVE-2026-21251

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

2026-02 .NET 9.0.13 Security Update for ARM64 Client (KB5077864)

2026-02 .NET 9.0.13 Security Update for ARM64 Client KB5077864...

CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

...

CVE-2026-21251 Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

...

CVE-2026-21251

CVE-2026-21251 describes a use-after-free in the Windows Cluster Client Failover, enabling a locally authenticated attacker to achieve privilege elevation. The CVSS 3.1 base score is 7.8 (HIGH) with local attack vector, low complexity, and low privileges required; confidentiality, integrity, and ...

CVE-2026-21251

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

Cluster Client Failover (CCF) Elevation of Privilege Vulnerability

Use after free in Windows Cluster Client Failover allows an authorized attacker to elevate privileges locally...

cpython: Excessive read buffering DoS in http.client

A flaw was found in the http.client module in the Python standard library. When reading an HTTP response from a server, if no read amount is specified, the default behavior will be to use Content-Length. This issue allows a malicious server to cause the client to read large amounts of data into...

Moderate: Red Hat Security Advisory: python3.12 security update

An update for python3.12 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

BIT-GOLANG-2025-68121 Unexpected session resumption in crypto/tls

During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. This may happen when a user calls Config.Clone and mutates the...

2026-02 .NET 8.0.24 Security Update for x86 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x86 Client KB5077863...

2026-02 .NET 8.0.24 Security Update for x64 Client (KB5077863)

2026-02 .NET 8.0.24 Security Update for x64 Client KB5077863...

2026-02 .NET 9.0.13 Security Update for x64 Client (KB5077864)

2026-02 .NET 9.0.13 Security Update for x64 Client KB5077864...

2026-02 .NET 10.0.3 Security Update for x64 Client (KB5077862)

2026-02 .NET 10.0.3 Security Update for x64 Client KB5077862...

2026-02 .NET 9.0.13 Security Update for x86 Client (KB5077864)

2026-02 .NET 9.0.13 Security Update for x86 Client KB5077864...

CVE-2025-13064

A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with...