Microsoft Windows: CVE-2026-83585: Windows NTFS Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally...

Microsoft SQL Server: CVE-2026-94520: Microsoft SQL Server Denial of Service Vulnerability

Use of externally-controlled format string in SQL Server allows an authorized attacker to deny service over a network...

CVE-2026-85842: Use of Externally-Controlled Format String

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

PT-2026-112441

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description The use of an externally-controlled format string in Windows NTFS allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information abou...

Microsoft Windows: CVE-2026-85842: Windows Image Acquisition Elevation of Privilege Vulnerability

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally...

PT-2026-112805

Name of the Vulnerable Software and Affected Versions Windows Image Acquisition affected versions not specified Description The use of an externally-controlled format string allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no...

CVE-2026-18418

The zbus proxy agent IPC backend in subsys/zbus/proxyagent/zbusproxyagentipc.c logged the channel name of a rejected inter-domain frame with a plain %s conversion. The frame type struct zbusproxymsg carries a fixed-size channelname array as its last member, and nothing in the transport guarantees...

doona

Doona - Strumento di fuzzing di rete .:: Informazioni ::. Doona è un fork del Bruteforce Exploit Detector Tool BED. BED è un programma progettato per controllare i daemon per potenziali buffer overflow, bug di formato stringa, ecc. Doona è il termine australiano per piumino. Aggiunge un numero...

K000163617: OpenSSL vulnerabilities CVE-2026-63072, CVE-2026-63073 and CVE-2026-63074

Security Advisory Description CVE-2026-63072 Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write and cleanse more bytes than that query reports, causing an 8-byte out-of-bounds heap writ...

CVE-2026-76753

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

EUVD-2026-93880

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76753 Unauthenticated Format String Vulnerability in HPE Networking ClearPass Policy Manager

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

CVE-2026-76753

A format string vulnerability exists in an affected service interface of HPE Networking ClearPass Policy Manager . This flaw could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation of this vulnerability may lead to arbitrary code execution . No specific s...

PT-2026-107192

Name of the Vulnerable Software and Affected Versions HPE Networking ClearPass Policy Manager affected versions not specified Description A format string flaw in a service interface allows an unauthenticated remote attacker to corrupt process memory. This condition could lead to the execution of...

CVE-2026-76753: Use of Externally-Controlled Format String

A format string vulnerability in an affected service interface of HPE Networking ClearPass Policy Manager could allow an unauthenticated remote attacker to corrupt process memory. Successful exploitation could allow an attacker to execute arbitrary code...

SUSE CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

EUVD-2026-90453

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...