Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System

Summary Multiple vulnerabilities affect IBM Cloud Pak System. These vulnerabilties have been addressed with IBM Cloud Pak System 2.3.5.1. Vulnerability Details CVEID:CVE-2025-15467 DESCRIPTION: Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD...

CVE-2026-56851

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851 Panic parsing crafted input in x/text/secure/precis in golang.org/x/text

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

EUVD-2026-94532

The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer...

CVE-2026-56851

The golang.org/x/text library is vulnerable to a panic in the x/text/secure/precis component. Specifically, the Nickname profile can trigger an out-of-bounds slice error when it attempts to transform crafted input into a short destination buffer . No specific exploit details or remediation versio...

Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...

CVE-2026-76457

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

EUVD-2026-93770

ImageSharp: Tiled fax TIFF: tile buffer sized by TileWidth but fax decompressor writes scanlines of ImageWidth — heap OOB write...

CVE-2026-76459 Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

EUVD-2026-94462

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76459 Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Write Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76459

The Cisco NX-OS Software is affected by out-of-bounds write vulnerabilities, categorized under CWE-787 . These issues were identified during an internal security review by the Cisco NX-OS engineering team. The vulnerabilities are addressed in a software hardening release dated October 2026. The C...

CVE-2026-76457 Cisco NX-OS Software Security Hardening Release: October 2026 - Out-of-bounds Read Vulnerabilities

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

EUVD-2026-94459

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco NX-OS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...

CVE-2026-76457

The Cisco NX-OS Software is subject to multiple out-of-bounds read vulnerabilities, identified under CWE-125 , following an internal security review. These issues are addressed in the October 2026 Software Security Hardening Release . The vulnerabilities have a HIGH base severity (CVSS 3.1: 8.6) ...

CVE-2025-24201-WebKit-Vulnerability-Detector-PoC-

CVE-2025-24201 WebKit 漏洞检测器（PoC） 此概念验证用于检测基于 WebKit 的浏览器是否易受 CVE‑2025‑24201 影响，这是一个由 WebGL 实现中不正确的功能验证导致的高严重性越界写入漏洞 。 🔍 漏洞摘要 当 WebGLRenderingContext（WebGL 1）允许启用常量 PRIMITIVERESTARTFIXEDINDEX（0x8D69）——一个仅在 WebGL 2 中有效的功能——而不产生 GLINVALIDOPERATION 或 GLINVALIDENUM 错误时，就会触发 CVE‑2025‑24201。...

CitrixBleed-2-CVE-2025-5777-PoC-

CitrixBleed 2 CVE-2025-5777 终极解析 An Out-of-Bounds Memory Read in NetScaler ADC / Gateway — 从成因到攻防演练的全景手册 poc用法：python3 poc.py https://gateway.example.com exp用法：python3 exp.py https://gateway.example.com admin 7acbb35f4d... 目录 0x00 引言 / 速览 0x01 背景：NetScaler 架构与 CitrixBleed 1 回顾 0x02...

CVE-2025-5777

CVE-2025-5777 （又名 CitrixBleed 2）是 Citrix Gateway 登录过程中的一个越界读取（OOB）。 这是一个利用该越界读取（CVE-2025-5777）的概念验证代码，用于从存在漏洞的 Citrix Gateway 实例中获取内存数据，可能导致 cookies/凭据被盗。 使用方法 我强烈建议在使用脚本时使用 venv 虚拟环境。 usage: main.py -h -t THREADS -o OUTPUT url positional arguments: url target URL options: -h, --help show this he...

CVE-2024-26160

CVE-2024-26160（cldflt.sys 信息泄露漏洞） 这里有一篇关于 CVE-2024-26160 的简短分析，该漏洞可在二月补丁（KB5034765 ，Windows 11 22H2、Windows 11 23H2）中找到。该漏洞已在三月补丁（KB5035853 ）中修复。 分析 该漏洞位于 CldiPortProcessGetRangeInfo 函数中，它没有 检查用户应用程序传入的缓冲区大小。由于该大小可由用户控制，memmove（用于复制返回的信息）在正确传入大小的情况下，可以获取包含内核地址的相邻内存池。 三月补丁（KB5035853 ）引入了对缓冲区大小的额外检...

CVE-2026-46571

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...