EUVD-2026-64691

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

libtiff: libtiff: Heap-based buffer overflow via crafted PixarLog-compressed TIFF image

A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue occurs when decoding Pixarlog codec images with the PIXARLOGDATAFMT8BITABGR output format and a specific stride value, leading to a heap-base...

Important: Red Hat Security Advisory: libtiff security update

An update for libtiff is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

CVE-2026-78169 UTT HiPER 1250GW HTTP Request aspRemoteApConfTempSend strcpy stack-based overflow

A vulnerability was detected in UTT HiPER 1250GW up to 3.2.7-210907-180535. This impacts the function strcpy of the file /goform/aspRemoteApConfTempSend of the component HTTP Request Handler. Performing a manipulation of the argument Profile results in stack-based buffer overflow. The attack is...

CVE-2026-78169

A stack-based buffer overflow in the UTT HiPER 1250GW (up to 3.2.7-210907-180535 ) affects the strcpy function within the file /goform/aspRemoteApConfTempSend of the HTTP Request Handler component. Manipulation of the Profile argument triggers the overflow, allowing a remote attack. CVSS 4.0 rate...

CVE-2025-5548

Laboratorio di Ricerca e Sfruttamento della Corruzione di Memoria CVE-2025-5548 Analisi Avanzata delle Vulnerabilità in Ambiente Windows 11 Versione Inglese Panoramica del Progetto Questo repository documenta un progetto di ricerca sulla sicurezza informatica di livello professionale focalizzato ...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Prova di concetto per l'overflow di intero di lettura remota di Microsoft Message Queuing tracciato come CVE-2026-54992. Il PoC utilizza due VM Windows. Un utente normale sul target vulnerabile chiede al servizio MSMQ locale di leggere da una coda ospitata dall'helper. L'helper...

CVE-2026-27654

CVE-2026-27654 NGINX ngxhttpdavmodule Heap Buffer Overflow via sizet Underflow Remote DoS / Potential RCE Description ngxhttpdavcopymovehandler in src/http/modules/ngxhttpdavmodule.c berechnet die Länge der Ziel-URI, indem die Länge des Location-Präfixes von der URI-Pfadkomponente des...

CVE-2025-4138-4517-POC

CVE-2025-4138 / CVE-2025-4517 Bypass del filtro di tarfile Python tramite escape dei symlink con PATHMAX Scrittura arbitraria di file tramite estrazione confilter="data" / filter="tar" Indice Panoramica Dettagli della vulnerabilità Com...

EUVD-2026-64674

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...

CVE-2026-7878-eBPF-Verifier-Type-Confusion-Kernel-Memory-Read-Write

6. CVE-2026-7878 – Confusion de type dans le vérificateur eBPF → Lecture/écriture mémoire noyau Vue d'ensemble Un débordement d'entier subtil dans le suivi des bornes du vérificateur eBPF permet à un attaquant de créer un programme eBPF qui accède à de la mémoire noyau hors limites. Sévérité :...

CVE-2026-78156

A security vulnerability has been detected in Open5GS 2.8.0. Affected by this issue is the function hssogsdiams6aaircb of the file src/hss/hss-s6a-path.c of the component S6a Authentication-Information-Request Handler. Such manipulation of the argument Visited-PLMN-Id leads to heap-based buffer...

CVE-2026-75368

CVE-2026-75368 affects the SpaceDot AcubeSAT OBC (On-Board Computer) software at commit eaf90ec . The vulnerability is a stack overflow in the loadRawData function, triggered when the system processes a crafted ECSS TC (Telecommand) message . An attacker who can supply a maliciously crafted TC me...

qemu-kvm security, bug fix, and enhancement update

10.1.0-16.el102.5 - kvm-file-posix-populate-pwritezeroesalignment.patch RHEL-207389 - kvm-block-use-pwritezeroesalignment-when-writing-first.patch RHEL-207389 - kvm-iotests-add-Linux-loop-device-image-creation-test.patch RHEL-207389 - Resolves: RHEL-207389 qemu-img create/convert fails on target...

EUVD-2026-65115

A stack overflow in the loadRawData function of SpaceDot AcubeSAT OBC software commit eaf90ec allows attackers to cause a Denial of Service DoS via supplying a crafted ECSS TC message...

Important: gstreamer1-plugins-good security update

GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fixes: gstreamer: GStreamer: Remote Code Execution via MRF fil...

ROS-20260824-73-0008

The vulnerability in freerdp3 is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

PT-2026-81033

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...

CVE-2026-52492

An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image...