OESA-2026-4539 brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It...

OESA-2026-4540 brotli security update

Brotli is a generic-purpose lossless compression algorithm that compresses data using a combination of a modern variant of the LZ77 algorithm, Huffman coding and 2nd order context modeling, with a compression ratio comparable to the best currently available general-purpose compression methods. It...

BIT-POWERSHELL-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

EUVD-2026-112677

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input...

CVE-2026-114358 SQL Injection Vulnerability in Radius Xenia M2M Platform

This vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user supplied input in the password recovery functionality in the web management interface. An unauthenticated remote attacker could exploit this vulnerability by supplying crafted SQL query through input...

CVE-2026-114358

A SQL Injection vulnerability exists in the Radius Xenia M2M Platform due to insufficient validation of user-supplied input within the password recovery functionality of the web management interface. An unauthenticated remote attacker can exploit this by submitting crafted SQL queries through inp...

Advisory ROSA-SA-2026-3317

There are 20 vulnerabilities in Apache httpd, including a buffer overflow in modvhostalias CVE-2026-63292, which could potentially allow remote code execution by sending an HTTP request containing a large Host header. The vulnerability occurs when a host substitution parameter is specified in the...

BIT-DOTNET-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

BIT-DOTNET-SDK-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

BIT-BROTLI-2026-111497 Out-of-Bounds Write in Google Brotli Decoder

A buffer overflow vulnerability in the Brotli decoder c/dec/decode.c in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause a denial of service, or potentially...

CVE-2025-62841

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

CVE-2025-62839

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

Exploit for OS Command Injection in Webmin

Secure REST API — Flask + CI/CD + CVE-2019-15107 Analysis Lab...

CVE-2025-62841

The HBS 3 Hybrid Backup Sync and Hybrid Backup Sync applications are affected by a hard-coded cryptographic key vulnerability (CWE-320). If exploited, this flaw could allow remote attackers to compromise the security of the system. Remediation is available in versions HBS 3 Hybrid Backup Sync 26....

CVE-2025-62841 Hard-coded Cryptographic Key #2

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

EUVD-2025-211209

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

CVE-2025-62839

The software HBS 3 Hybrid Backup Sync and Hybrid Backup Sync is vulnerable to a use of hard-coded cryptographic key (CWE-321). This flaw could allow remote attackers to compromise system security. Remediation is available in versions 26.4.0.521 and later for HBS 3 Hybrid Backup Sync, and versions...

EUVD-2025-211208

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

CVE-2025-62839 Hard-coded Cryptographic Key #1

An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version...

Log4jPatch

-- This repository has been archived -- Further development of this tool will continue at corretto/hotpatch-for-apache-log4j2. Thanks for sharing, commenting, trying it out and contributing to this project! Log4jPatch This is a POC of a simple tool which injects a Java agent into a running JVM...