Debian dla-4773 : libssh2-1 - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4773 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4773-1 [email protected]...

USN-8714-2 linux-aws-5.4, linux-gcp, linux-gcp-5.4 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309...

USN-8714-2: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309...

USN-8725-1 linux, linux-aws, linux-fips, linux-kvm, linux-lts-xenial vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - NVIDIA Tegra memory controller driver; - File systems infrastructure; - Network file system NFS server daemon; -...

CVE-2026-19534

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...

EUVD-2026-71480

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of the prefix length in ICMPv6 Router Advertisements...

Incorrect Remote IP Address Evaluation

Reactor Netty is vulnerable to an Incorrect Remote IP Address Evaluation. The vulnerability is due to improper evaluation of the remote IP address when the HAProxy Protocol is enabled, which may allow an attacker to spoof or manipulate the perceived client IP address under specific configurations...

WindowsProtocolTestSuites v4.26.9.0

Windows Protocol Test Suites Windows Protocol Test Suites provide interoperability testing against the implementation of Windows open specifications including File Services, Identity Management, Remote Desktop and etc. Originally developed for in-house testing of the Microsoft Open Specifications...

CryptoLyzer v1.6.0

CryptoLyzer is a fast, flexible, and comprehensive server cryptographic protocol TLS, SSL, SSH, IKE, DNSSEC and related setting HTTP headers, DNS records analyzer and fingerprint JA3, HASSH generator with API and CLI interfaces. Use CryptoLyzer when you need to audit TLS/SSL cipher suites — unlik...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...

Exploit for CVE-2020-1938

CVE-2020-1938 Tomcat File Read / File Include Ghostcat — pyt...

EUVD-2026-70816

MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowing unauthenticated clients to connect with full publish, subscribe, and database clear privileges. Attackers can bypass the compile-time protocol string check and connect with arbitrary client names to execute privileg...

PT-2026-91370

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

Linux SCTP Heap Buffer Overflow DoS

The vulnerability of the sctprcvasconflookup function in the net/sctp/input.c module of the Linux operating system’s SCTP protocol implementation is related to improper handling of length parameter discrepancies. Exploiting this vulnerability can allow an attacker to gain access to protected...

CVE-2026-19534: Uncaught Exception

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...

CVE-2026-81665: Heap-based Buffer Overflow

A heap-based buffer overflow was found in Corosync's Totem Process Group totempg message reassembly. When processing fragmented multicast messages, the buffer used to reassemble fragments lacks a runtime bounds check in release builds. A network-adjacent attacker able to send crafted multicast...

Linux Kernel UDP DoS

The vulnerability of the udpreadskb function in the net/ipv4/udp.c module of the Linux kernel’s IPv4 protocol implementation is related to the lack of resource initialization. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Linux SCTP Heap Buffer Overflow DoS

The vulnerability of the sctpgetsockoptpeerauthchunks function in the net/sctp/socket.c module of the Linux operating system’s SCTP protocol implementation is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a attacker to compromise the...

SMC Protocol Heap Buffer Overflow DoS

The vulnerability of the smcsetsockopt function in the net/smc/afsmc.c module of the SMC protocol family implementation in Linux’s kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

Ubuntu 18.04 LTS / 20.04 LTS : Linux kernel vulnerabilities (USN-8714-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8714-1 advisory. Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update...