rails-forensics-CVE-2026-66066

rails-forensics-CVE-2026-66066 Tooling and method for answering two questions about a Rails application and CVE-2026-66066, the Active Storage and libvips arbitrary file read known as KindaRails2Shell: 1. Was I vulnerable, and for how long? 2. Was I exploited, and if so, what left the building? T...

CVE-2026-0897

CVE-2026-0897 — Google Keras：权重加载中的 HDF5 形状炸弹拒绝服务漏洞 -orange?style=for-the-badge -brightgreen?style=for-the-badge 概述 字段| 详情 ---|--- CVE ID| CVE-2026-0897 软件包| keras（Google Keras） 注册源| PyPI 受影响版本| 3.0.0 至 3.13.0（含） 漏洞类型| CWE-770：无限制或无节流的资源分配 CVSS 分数| 7.1 高危（CVSS 4.0，CNA：Google Inc.） CVSS 向量|...

CVE-2026-9335-keras-hdf5-externallink

CVE-2026-9335 — Divulgación de contenido de archivos locales HDF5 mediante ExternalLink en Keras Dos APIs públicas de Keras — keras.saving.KerasFileEditor y keras.saving.loadweights / model.loadweights — leen miembros de grupos HDF5 mediante indexación directa sin verificar el tipo de enlace. h5p...

CVE-2026-86095

A flaw was found in netcdf-c. An attacker can craft a malicious HDF5 Hierarchical Data Format 5 file with an oversized attribute name. When an application processes this file and attempts to enumerate attribute names, the oversized name can cause an out-of-bounds write, leading to memory corrupti...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: hdf5: hdf5-2.2.0-0.1.2.hum1 aarch64, x8664 hdf5-devel-2.2.0-0.1.2.hum1 aarch64, x8664 hdf5-mpich-2.2.0-0.1.2.hum1 aarch64, x8664 hdf5-mpich-devel-2.2.0-0.1.2.hum1 aarch64, x8664...

hdf5: HDF5: Information disclosure and denial of service via crafted HDF5 file

A flaw was found in HDF5, a widely used data management library. This vulnerability allows an attacker to craft a malicious HDF5 file that, when processed, can cause the application to read beyond its allocated memory. This out-of-bounds read could lead to the disclosure of sensitive information ...

hdf5: HDF5: Denial of Service via integer underflow in Fletcher32 filter

A flaw was found in HDF5. An attacker can craft a malicious HDF5 file with a specially designed Fletcher32-filtered chunk. When this file is processed, an integer underflow occurs due to insufficient size validation, leading to a massive out-of-bounds read. This vulnerability can cause the...

hdf5: HDF5: Denial of service via crafted HDF5 file

A flaw was found in HDF5. A remote attacker could craft a malicious HDF5 file that, when opened and read, would cause an application using the HDF5 library to crash. This issue stems from improper validation of input data within the N-Bit filter, leading to a denial of service DoS and impacting t...

CVE-2026-66066

CVE-2026-66066 — KindaRails2Shell Ruby on Rails Active Storage + libvips 任意文件读取 → 条件性远程代码执行RCEPoC 工具。 单文件,Python 3.11+ 纯标准库零依赖 ,内置 MAT/HDF5 混合载荷、纯 Python PNG 像素解码器、偏移读取、密钥恢复、RCE 与扫描模式。 漏洞简述 Rails 信任客户端自报的 contenttype直接上传端点,libvips 则嗅探文件 magic bytes——同一个文件在两层被当成两种格式 。攻击者构造"前 10 字节文本声称 MATLAB 5.0、字...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054072)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054072 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Tcopy in H5T.c. Tenable has extracted the preceding...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054070)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054070 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Osdspacedecode in H5Osdspace.c. Tenable has extracte...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2023-001154)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001154 advisory. Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054073)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054073 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is an out of bounds read in the function H5Faccumread in H5Faccum.c. Tenable has extracted the precedin...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054071)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054071 advisory. An issue was discovered in the HDF HDF5 1.8.20 library. There is a heap-based buffer over-read in the function H5Olayoutdecode in H5Olayout.c, related to HDmemcpy...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2026-054074)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-054074 advisory. A buffer overflow in H5Olayoutencode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. Thi...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: hdf5 (UTSA-2023-001155)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-001155 advisory. An issue was discovered in HDF5 through 1.12.0. A heap-based buffer over-read exists in the function H5Olayoutdecode located in H5Olayout.c. It allows an attacker to...

OESA-2026-3874 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OESA-2026-3873 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

OESA-2026-3872 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

SUSE SLES15: libnetcdf-gnu-hpc / libnetcdf-gnu-mpich-hpc / etc (SUSE-SU-2026:4249-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2026:4249-1 advisory. This update for netcdf fixes the following issue: - CVE-2026-86095: out-of-bounds write in NC4HDF5inqattname due to missing length validation when...