Moderate: Red Hat Security Advisory: libreswan security update

An update for libreswan is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

CVE-2026-109257

A flaw was found in FreeRDP. A remote attacker using a specially crafted Remote Desktop Protocol RDP client can request NSCodec compression with large display dimensions to trigger a memory allocation failure on the server. Because the server fails to properly clear memory pointers during error...

CVE-2026-109254

A flaw was found in FreeRDP. A use-after-free vulnerability allows a malicious Remote Desktop Protocol RDP server to cause a Denial of Service DoS by crashing the client. During static audio channel disconnection, audio data structures are released before the background playback thread finishes...

CVE-2026-109255

A flaw was found in FreeRDP. An integer truncation issue in license stream length validation allows a malicious Remote Desktop Protocol RDP server to bypass size checks by sending a specially crafted licensing request. This flaw leads to an undersized memory allocation and a heap-based buffer...

CVE-2026-109248

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can trigger a heap out-of-bounds read by returning a specially crafted response during clipboard operations. When a user attempts to paste files copied from the remote session into a local application, improper handling o...

CVE-2025-8671

CVE-2025-8671 - PoC DoS lighttpd HTTP/2 Author : @abiyeenzo ⚠️ Warning This project is provided for educational purposes only. Running the PoC against third-party servers may constitute an illegal cyberattack and lead to criminal prosecution. Only use this script on your test environments or local...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CVE-2026-89202

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly perform authorization checks for device disconnection requests. This could allow an authenticated attacker with minimal privileges to disconnect active sessions of other users, including...

CVE-2026-102073

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102074

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102075

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

http2-bomb-detector

http2-bomb-detector HTTP/2 Bomb CVE-2026-49975 Non-destructive vulnerability detection tool — for Nginx / Apache httpd Vulnerability Background CVE-2026-49975 is a widespread remote denial-of-service vulnerability in the HTTP/2 protocol layer, discovered by security researcher Quang Luong. This...

CVE-2026-92707

Impact MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into "System.Object". When "PrimitiveObjectFormatter" encounters an array, it allocates an "object" using the declared array length before enforcing the...

nextjs-security-update

nextjs-security-update There are people building OSS tools to exploit the new Next.js vulnerabilities. This is a tool to fight back - makes it dumb easy to upgrade all your Next.js apps across all your GitHub accounts. Uses the official Vercel fix tool under the hood. What happened Dec 11, 2025:...

ogmios-queryledgerstate-dump-poc

Ogmios queryLedgerState/dump — Unauthenticated Arbitrary Fil...

CVE-2026-102076

A vulnerability exists in the web service of various APOGEE and TALON products, including MBC , MEC , PXC Compact , PXC Modular , and TC Compact/Modular models. The root cause is the improper validation of user-supplied input within the upload code, categorized as a stack-based buffer overflow (C...

CVE-2026-102076

A vulnerability has been identified in APOGEE MBC PPC BACnet All versions, APOGEE MBC PPC P2 Ethernet All versions, APOGEE MEC PPC BACnet All versions, APOGEE MEC PPC P2 Ethernet All versions, APOGEE PXC Compact BACnet All versions V3.5.7, APOGEE PXC Compact P2 Ethernet All versions V2.8.21, APOG...

CVE-2026-102075

A vulnerability exists in the web service of various products, including APOGEE MBC , APOGEE MEC , APOGEE PXC Compact , APOGEE PXC Modular , TALON TC Compact , and TALON TC Modular . The root cause is a failure to properly validate user input during multipart handling , which could allow an unaut...

CVE-2026-102074

The FTP service in several APOGEE and TALON products is vulnerable to a stack-based buffer overflow (CWE-121) due to improper validation of user-controllable input length. Affected systems include APOGEE MBC (PPC) , APOGEE MEC (PPC) , APOGEE PXC Compact , APOGEE PXC Modular , TALON TC Compact , a...