AlmaLinux 9.2 [TuxCare] Security Update: libpcap / libpcap-devel (ALMALINUX9.2:CLSA-2026:1791564868)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1791564868 advisory. - In BPF instructions that load/store a value from/to a scratch memory register the register index is an unsigned 32-bit integer and must not...

vuln-driver-aida64

vuln-driver-aida64 DISCLAIMER: This repository contains ai as...

vivo-root-build

PD2415 6.6.89 Candidato Full-Flow Questa sorgente si basa sul motore IonStack PD2415 6.6.57 stesso-dispositivo/stesso-SoC: perf KASLR, pselect GhostLock, CFI fops, pipe physrw. La chiusura del carrier dumpstate è mantenuta dal metodo PD2241 validato. Il target 6.6.89 archiviato mantiene...

MGASA-2026-0471 Updated libxfont2 package fixes security vulnerabilities

fsreadglyphs heap buffer overflow via cumulative glyph data overflow in libXfont2. CVE-2026-44950 fsreadglyphs heap OOB read/write via encoding array index mismatch in libXfont2. CVE-2026-59679...

Updated libxfont2 package fixes security vulnerabilities

fsreadglyphs heap buffer overflow via cumulative glyph data overflow in libXfont2. CVE-2026-44950 fsreadglyphs heap OOB read/write via encoding array index mismatch in libXfont2. CVE-2026-59679...

cve-2018-8453-exp

cve-2018-8453-exp cve-2018-8453 exp Questo programma è un exploit per cve-2018-8453. Piattaforma di sviluppo\test: x86: windows 10 rs2 15063 x64: windos 10 rs2 16299 Nota: utilizza Palette per leggere/scrivere il kernel Avvertenza importante: questo strumento è destinato esclusivamente alla ricer...

Moderate: Red Hat Security Advisory: tftp security update

An update for tftp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

tftp: tftp-hpa: Denial of Service due to out-of-bounds read/write in remap engine

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

SUSE-SU-2026:24200-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap buffer overflow in ntfscheckrestartarea bsc1281759. - Heap buffer overflow in ntfseacheckwsldev bsc1281760. - Heap...

OPENSUSE-SU-2026:22053-1 Security update for ntfs-3g_ntfsprogs

This update for ntfs-3gntfsprogs fixes the following issues: - Denial-of-service in ntfsinodeattachallextents bsc1281758. - Heap buffer overflow in ntfsaclowner bsc1281756. - Heap buffer overflow in ntfscheckrestartarea bsc1281759. - Heap buffer overflow in ntfseacheckwsldev bsc1281760. - Heap...

Moderate: tftp security update

The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server subpackages. The tftp subpackage provides the user interface for TFTP and the tftp-server subpackage provides the server. This allows users to...

RHEL 8 : tftp (RHSA-2026:78952)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:78952 advisory. The Trivial File Transfer Protocol TFTP is typically used only for booting diskless workstations. The tftp packages include the tftp and tftp-server...

GHSA-X3Q2-H9HX-4R4J Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Summary When the LaTeX backend is configured to render TikZ pictures with the Tectonic engine LatexBackendOptionstikzengine="tectonic", the TikZ body and the document preamble from the input file are compiled by Tectonic without any restriction on TeX's file primitives. A crafted .tex file can re...

GO-2026-6621 SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword (publish mode): cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel

SiYuan: Unauthenticated SQL injection in searchDocs via unescaped keyword publish mode: cross-notebook read/write with statement stacking in github.com/siyuan-note/siyuan/kernel...

PT-2026-107674

threatreport HighCompleteness DarkSword/Coruna Open Directory Finding Report | 07-10-2026 Source: https://t.co/CYqnWeWnOw Key details below ↓ 🧑‍💻Actors/Campaigns: Unc6353 Unc6748 💀Threats: Darksword tool, Coruna tool, Ds fusion, Gooll, Watering hole technique, Plasma, Ghost, Ghostblade, Ghostknife,...

Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware

Research on Vivo iQOO Neo 9 Rooting CVE-2025-21479 This pro...

GFAC-poc

GFAC.sys - Local Privilege Escalation PoC Almost fully reve...

CVE-2026-98365

In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Fix integer overflow in mrcheckrange leading to OOB access mrcheckrange validates that iova, iova+length falls within the registered MR range using wraparound-prone arithmetic: if iova ibmr.iova || iova + length...

Security Advisory 0189

Security Advisory 0189 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release 1.1 | October 13, 2026 | Updated Resolution section to include the 2026.3.0 release Description All CVEs covered in this advisory affect platforms running...

CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, callers that opt into LatexBackendOptionstikzengine="tectonic" invoke docling/backend/latex/engines/tectonic.py to compile an untrusted TikZ bo...