AZL-106728 CVE-2026-77214 affecting package expat 2.8.3-2

libexpat before commit 13c5f63 contains a heap buffer over-read vulnerability in xmlparse.c. XMLParseBuffer advances the parse buffer end with parser-mbufferEnd += len using a caller-supplied length that is not validated against the allocated buffer size, so repeated XMLParseBuffer calls move...

CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-104074 Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-104074

The Coturn software (version 4.10.0 ) is vulnerable to an uninitialized stack memory disclosure vulnerability. An unauthenticated remote attacker can leak stack memory contents by sending a TURN Allocate request without credentials. The flaw exists in the stun_init_error_response_common_str() fun...

CVE-2026-104074 Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

EUVD-2026-94363

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-104074 Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

heartbleed

HEARTBLEED：OpenSSL TLS 心脏出血漏洞 OpenSSL TLS 心跳扩展 - 内存泄露 - 多 SSL/TLS 版本漏洞扫描器与利用工具 需要： sudo apt-get install nmap lolcat Java sudo apt install default-jre default-jdk...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed MongoDB zlib 压缩内存泄露 — 分析、检测与修复 概述 CVE-2025-14847，通常被称为 MongoBleed ，是一个影响 MongoDB 服务器的高危信息泄露漏洞。 该漏洞允许远程、未授权攻击者 通过利用对 zlib 压缩网络消息处理不当，泄露服务器内存中的敏感数据。 该问题已在野外被积极利用，并影响使用默认压缩配置的 MongoDB 部署。 CVE 编号： CVE-2025-14847 严重等级： 高危（CVSS 8.7） 攻击向量： 网络 是否需要认证： 否 用户交互： 无 利用状态： 已确认活跃利用 技术摘...

RLSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

PT-2026-107529

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stun init error response common str function in src/client/ns turn...

PT-2026-107540

Name of the Vulnerable Software and Affected Versions libexpat versions prior to 2.9.0 Description A heap buffer over-read exists in the xmlparse.c file. The XML ParseBuffer function advances the parse buffer end using a caller-supplied length that is not validated against the allocated buffer...

CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

Debian: CVE-2026-46571: ntfs-3g -- security update

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

CVE-2026-46571

A out-of-bounds read vulnerability exists in NTFS-3G before version 2026.7.7 within the ntfs_fix_file_name() function in libntfs-3g/reparse.c. An attacker can exploit this by crafting a malicious NTFS image to trigger a readlink on a corrupted file, potentially allowing them to read confidential ...

EUVD-2026-94353

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...

AlmaLinux 8 : freerdp (ALSA-2026:76747)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:76747 advisory. FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command CVE-2026-91954 FreeRDP: FreeRDP: Remote code execution via heap buffer overflow in...

MongoBleed-CVE-2025-14847

MongoBleed CVE-2025-14847 – 漏洞检查器 Systemhaus Schulz – 安全工具 一款专业级安全扫描器，用于检测 MongoBleed CVE-2025-14847 MongoDB 内存泄露漏洞。 与简单的版本检查工具不同，本扫描器采用 PoC 精准探测技术 ，安全地复现漏洞利用逻辑，以判断目标是否确实存在漏洞。 不修改任何数据 无需身份验证 无破坏性行为 受控的只读探测 结果： 真实确认 — 绝非猜测。 ⭐ 功能特性 ✔️ PoC 精准检测逻辑 ✔️ 确认是否发生真实内存泄露 ✔️ 无需身份验证即可工作 ✔️ 支持： 单主机：--host IP...