6238 matches found
Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun
Netgear RAX43 version 1.0.3.96 contains a command injection and authentication bypass vulnerability. The readycloudcontrol.cgi CGI application is vulnerable to command injection in the name parameter. Additionally, the URL parsing functionality in the cgi-bin endpoint of the router containers a...
K000164139: Multiple Linux kernel vulnerabilities
Security Advisory Description CVE-2026-53016 In the Linux kernel, the following vulnerability has been resolved: crypto: ccp - copy IV using skcipher ivsize AFALG rfc3686-ctr-aes-ccp requests pass an 8-byte IV to the driver. ccpaescomplete restores AESBLOCKSIZE bytes into the caller's IV buffer...
CVE-2026-98275
A flaw was found in the Linux kernel's Cortina Ethernet driver. This flaw may result in a Denial of Service DoS when a network receive buffer overrun occurs. Due to an incorrect bit calculation, the interrupt service routine acknowledges the wrong register bit, leaving the overrun interrupt...
SUSE-SU-2026:24523-1 Security update for the Linux Kernel RT (Live Patch 15 for SUSE Linux Enterprise 16)
This update for the SUSE Linux Enterprise Kernel 6.12.0-160000.36.1 fixes various security issues: The following security issues were fixed: - CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. - CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. -...
Security update for the Linux Kernel (Live Patch 23 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-46.1 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. CVE-2026-64217: netf...
Security update for the Linux Kernel (Live Patch 27 for SUSE Linux Enterprise Micro 6.0)
This update for the SUSE Linux Enterprise Kernel 6.4.0-50.2 fixes various security issues: The following security issues were fixed: CVE-2026-53381: virtiofs: fix UAF on submount umount bsc1271837. CVE-2026-63968: ipv6: fix possible infinite loop in fib6selectpath bsc1272521. CVE-2026-64217: netf...
openmagic
openmagic openmagic can assist you in the automating testing and exploiting of systems vulnerable to the OpenSSL TLS heartbeat read overrun CVE-2014-0160. The base module wraps a modified version of the "ssltest.py" program by Jared Stafford and provides the following additional features: Save th...
CVE-2022-26937
Windows Network File System Crash PoC CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. The...
cve-2021-4034-mock
CVE-2021-4034 PwnKit Mock Vulnerability System This project is a mock system that reproduces the core operating principles of CVE-2021-4034 Out-of-Bounds Read/Write vulnerability in the Linux pkexec daemon. Without actual SUID privilege escalation, it safely simulates the mechanism of environment...
cve-2026-42945
CVE-2026-42945 — NGINX Rewrite Heap Overrun: Analysis, DoS & Credited RCE Port Security research on CVE-2026-42945 CVSS 4.0 9.2 CRITICAL: a heap buffer overrun in NGINX's script engine where a rewrite with arguments in the replacement e.g. rewrite ^. /new?c=1; leaves the engine's isargs flag set...
CLEANSTART-2025-RP22044 buffer overrun can be triggered in X
CVE-2022-3786 affects multiple packages. A buffer overrun can be triggered in X. See references for individual vulnerability details...
CVE-2026-119722
A flaw was found in Blender. This vulnerability allows an attacker to achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to open a specially crafted project file. Because the application fails to properly validate structure sizes during file parsing, memory...
CVE-2026-118475
The Eye of GNOME application is vulnerable to a buffer overrun when parsing specially crafted PNG images containing malformed color profile metadata. The root cause is a failure to validate chunk boundaries while searching for a null terminator within a non-standard iccp chunk . This flaw allows ...
CVE-2026-118475 Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...
CVE-2026-118475 Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...
CVE-2026-118475 Eog: eye of gnome: buffer overrun when parsing malicious png files with non-standard iccp chunk
A flaw was found in Eye of GNOME. When parsing a specially crafted PNG image containing malformed color profile metadata, the application fails to validate chunk boundaries while searching for a null terminator. An attacker could trick a user into opening a malicious image, causing the applicatio...
SUSE CVE-2026-99081
In the Linux kernel, the following vulnerability has been resolved: bnxten: fix DMA mapping length for padded small packets Stefan Fleischmann reported Intel IOMMU DMA Read faults on BCM57412 NetXtreme-E NICs when transmitting packets on VLAN/macvlan interfaces: DMAR: DMA Read NOPASID Request...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: xorg-x11-server-Xwayland (UTSA-2026-147018)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147018 advisory. A flaw was found in the X.Org X server. This integer underflow vulnerability, specifically in the XKB compatibility map handling, allows an attacker with local or...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: OpenEXR (UTSA-2026-147020)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-147020 advisory. OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry. In...
