CVE-2026-90778

SIPp through 3.7.7 is vulnerable to a buffer overflow in the get_peer_tag() function when processing SIP To headers containing tag parameters of 2049 bytes or more . Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow a static buffer and crash ...

EUVD-2026-77002

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

CVE-2026-90778 SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

CVE-2026-90778 SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag

SIPp through 3.7.7 contains a buffer overflow vulnerability in getpeertag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

CVE-2026-90774

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2026-90774 rustypaste before 0.18.1 Path Traversal via filename header

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

EUVD-2026-76995

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2026-90774 rustypaste before 0.18.1 Path Traversal via filename header

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2026-90774 rustypaste before 0.18.1 Path Traversal via filename header

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2026-90774

rustypaste before 0.18.1 is vulnerable to a path traversal via the optional custom filename HTTP header. The root cause is that the destination path is validated before the filename header is applied, so an attacker can supply traversal sequences (e.g., ../) in the header to write files outside t...

CVE-2026-90679

Forgejo 13.0.0 through 16.0.4 with [federation] ENABLED = true contains a signature-spoofing flaw in its ActivityPub inbox processing. The HTTP Signature verification in routers/api/v1/activitypub/reqsignature.go validates the request, but inbox handlers then read the acting identity from the att...

PT-2026-90841

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

CVE-2026-90774: Improper Limitation of a Pathname to a Restricted Directory

rustypaste before 0.18.1 validates the destination path before applying the optional custom filename HTTP header, allowing attackers to bypass directory-escape checks. Attackers can supply path traversal sequences in the filename header to write files outside the configured upload directory to...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-requests (UTSA-2023-002301)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-002301 advisory. Requests is a HTTP library. Since Requests 2.3.0, Requests has been leaking Proxy-Authorization headers to destination servers when redirected to an HTTPS endpoint...

PT-2026-90849

SIPp through 3.7.7 contains a buffer overflow vulnerability in get peer tag function when processing SIP To headers with tag parameters of 2049 bytes or more. Unauthenticated remote attackers can send crafted SIP messages with oversized tag parameters to overflow the static buffer and crash the...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2023-003837)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003837 advisory. Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server...

UBUNTU-CVE-2026-90558

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

CVE-2026-90558 sngrep through 1.8.4 Stack Buffer Overflow via SIP Headers

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

EUVD-2026-76903

sngrep through 1.8.4 contains stack buffer overflow vulnerabilities in SIP attribute formatting routines when header values exceed the 255-byte buffer limit. Attackers can craft malicious SIP packets with oversized Call-ID, X-Call-ID, or other header fields to overflow stack buffers and cause...

SUSE CVE-2026-80978

In the Linux kernel, the following vulnerability has been resolved: net: cap advertised IP tunnel headroom IP tunnel devices derive their advertised neededheadroom from lower output devices. A stack of user-created devices can make the derived value larger than the 16-bit skb header offsets can...