[SECURITY] [DLA 4826-1] puma security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4826-1 [email protected] https://www.debian.org/lts/security/ Abhijith PA October 07, 2026 https://wiki.debian.org/LTS -...

Exploit for CVE-2026-13043

🕷️ CVE-2026-13043 - Panda / WatchGuard Kernel Memory Access...

SUSE-SU-2026:24115-1 Security update for qemu

This update for qemu fixes the following issues: Security issues fixed: - CVE-2026-81627: missing writable RAM alias validation in the VAPIC setup hypercall allows a privileged guest user to bypass chipset DLCK protection and injecting code into System Management Mode memory bsc1282077. -...

heartbleed

HEARTBLEED : OpenSSL TLS HEARTBLEED VULNERABILITY OpenSSL TLS Heartbeat Extension - Memory Disclosure - Multiple SSL/TLS versions vulnerability scanner and exploit need: sudo apt-get install nmap lolcat java sudo apt install default-jre default-jdk...

CVE-2026-19186

ieee802154decipherdataframe in subsys/net/l2/ieee802154/ieee802154frame.c computed payloadlen = netpktgetlenpkt - llhdrlen - authtaglen without first checking that the received frame is at least llhdrlen + authtaglen bytes long. All three variables are uint8t, so a frame whose payload is shorter...

CVE-2026-19186 Integer underflow in IEEE 802.15.4 frame decryption leads to out-of-bounds read and write

ieee802154decipherdataframe in subsys/net/l2/ieee802154/ieee802154frame.c computed payloadlen = netpktgetlenpkt - llhdrlen - authtaglen without first checking that the received frame is at least llhdrlen + authtaglen bytes long. All three variables are uint8t, so a frame whose payload is shorter...

EUVD-2026-94229

ieee802154decipherdataframe in subsys/net/l2/ieee802154/ieee802154frame.c computed payloadlen = netpktgetlenpkt - llhdrlen - authtaglen without first checking that the received frame is at least llhdrlen + authtaglen bytes long. All three variables are uint8t, so a frame whose payload is shorter...

CVE-2026-103416

Out-of-bounds write via the TLS 1.3 handshake message cache in NetX Duo in Eclipse ThreadX NetX Duo 6.5.1.202602 allows a handshake message larger than the cache writes past it and on into the rest of the session control block, which holds pointers. A malicious or compromised server can make a TL...

CVE-2025-14847-MongoBleed

CVE-2025-14847 MongoBleed MongoDB zlib Compression Memory Disclosure — Analysis, Detection, and Remediation Overview CVE-2025-14847, commonly referred to as MongoBleed , is a high-severity information disclosure vulnerability affecting :contentReferenceoaicite:0index=0 Server. The vulnerability...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

CVE-2025-22457-vulnserver-lab

step 1 environment setting Permissions & execution script If you are using Windows, you can open WSL to execute it. chmod +x setupenvironment.sh ./setupenvironment.sh step 2: Finding dynamic values manual steps required Since memory addresses and IPs are dynamic in different environments, you nee...

Formbook-Payload-Extraction-XOR-Decryption-Net-Assembly-Analysis

1. x32dbg – Encrypted Configuration Decryption & Memory Allocation The x32dbg memory dump reveals that Formbook decrypts its configuration data and allocates memory for it using NtAllocateVirtualMemory. Key Observations: NtAllocateVirtualMemory – Allocates memory for the decrypted payload. mov...

CVE-2026-98357

A flaw was found in the Linux kernel's iSCSI Extensions for Remote Direct Memory Access iSER target driver. This vulnerability can lead to arbitrary code execution or a Denial of Service DoS due to memory corruption. During connection teardown, background tasks process deferred control messages...

K000163580: Elasticsearch vulnerability CVE-2026-56149

Security Advisory Description Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130. A user with elevated privileges can submit a specially crafted machine learning request that causes excessive memory...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

kernel: nvmet-auth: reject short AUTH_RECEIVE buffers

A flaw was found in the nvmet-auth component of the Linux kernel. A remote attacker, by sending a specially crafted AUTHRECEIVE buffer to an NVMe-oF NVM Express over Fabrics target with in-band authentication enabled, can trigger a heap out-of-bounds write. This vulnerability arises because the...

ROOT-OS-ALPINE-321-CVE-2026-3805 CVE-2026-3805 in curl - Patched by Root

Root has patched CVE-2026-3805 in the curl package for Root:Alpine:3.21. Multiple fixed versions available...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...