CVE-2026-65969

OpenImageIO (a toolset for reading, writing, and manipulating image files used in VFX/animation) is affected by a signed 32-bit integer overflow in GifSplitPalette() (src/gif.imageio/gif.h). A truncated TGA input can leave a pending GIF frame that is processed during output close; the multiplicat...

CVE-2026-16512

gptphandlemsg in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTPHDR and switched on hdr-messagetype without first checking that the received frame carries at least sizeofstruct gptphdr 34 bytes of payload. The header accessor gptpgethdr deliberately never fails fo...

EUVD-2026-82947

gptphandlemsg in subsys/net/l2/ethernet/gptp/gptp.c dereferenced the gPTP header returned by GPTPHDR and switched on hdr-messagetype without first checking that the received frame carries at least sizeofstruct gptphdr 34 bytes of payload. The header accessor gptpgethdr deliberately never fails fo...

EulerOS Virtualization 2.11.1 : python-ecdsa (EulerOS-SA-2026-3458)

According to the versions of the python-ecdsa packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Cur...

CVE-2026-90141

In the Linux kernel, the following vulnerability has been resolved: ipvs: fix integer overflow in ftp helper port/address parsing ipvsftpgetaddrport accumulates decimal digits into a u16 hport and into unsigned char p without checking for overflow. A crafted FTP PASV/EPSV response with an over-lo...

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names

A flaw was found in XML::LibXML for Perl. A remote attacker could exploit this vulnerability when processing specially crafted XML node names containing incomplete UTF-8 character sequences. This can lead to an out-of-bounds read in heap memory, potentially causing the application to crash and...

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Important: Red Hat Security Advisory: perl-XML-LibXML security update

An update for perl-XML-LibXML is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

perl-XML-LibXML: XML::LibXML: Denial of Service via truncated UTF-8 in XML node names

A flaw was found in XML::LibXML for Perl. A remote attacker could exploit this vulnerability when processing specially crafted XML node names containing incomplete UTF-8 character sequences. This can lead to an out-of-bounds read in heap memory, potentially causing the application to crash and...

CVE-2026-7482

CVE-2026-7482: Reproducción de lectura fuera de límites Heap OOB en GGUF de Ollama Este repositorio contiene mi script de reproducción local para CVE-2026-7482, una lectura fuera de límites en el montón heap out-of-bounds read en las rutas vulnerables de carga y cuantización de GGUF de Ollama. El...

CVE-2026-89986

In the Linux kernel, the following vulnerability has been resolved: m...

CVE-2026-89841

In the Linux kernel, the following vulnerability has been resolved: f...

CVE-2026-89994

In the Linux kernel, the following vulnerability has been resolved: d...

CVE-2026-86043

Skipper is an HTTP router and reverse proxy for service composition. Prior to version 0.27.37, the opaAuthorizeRequestWithBody filter can authorize an oversized request after Skipper truncates the body presented to Open Policy Agent because the input.truncatedbody signal is derived from...

CVE-2026-45729

CVE-2026-45729 — Desreferencia de puntero NULL en ThorVG mediante SVG malformado Severidad: CVSS 4.3 Media — CWE-476 Aviso: GHSA-f863-8ghq-7h64 Corregido en: ThorVG v1.0.5 Estado: Parcheado / Divulgado Resumen El analizador SVG de ThorVG desreferencia un puntero que nunca se inicializa cuando...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed 的古老表亲，自1997年起潜伏在 Squid 中。 ✨ 特性 单文件 PoC — 零依赖 模仿 NetWare 横幅并发送截断 LIST 响应的恶意 FTP 服务器 实时检测和解码 Basic Auth 和 Bearer 令牌 多线程堆喷射以加速泄漏 简洁的彩色控制台输出，包含实时统计信息 🚀 快速开始 root@kitploit: git clone https://github.com/0xBlackash/CVE-2026-47729.git cd CVE-2026-47729 python3...

CVE-2026-90994

A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...

CVE-2026-53496

ExifReader (npm package exifreader), a JavaScript Exif metadata parser, is vulnerable to denial of service via crafted HEIC/AVIF files in versions prior to 4.40.1 . The ISO-BMFF parser in src/image-header-iso-bmff.js accepts an 8-byte box header without verifying that required fields remain withi...

CVE-2026-53496 ExifReader HEIC/AVIF ISO-BMFF parser throws uncaught RangeError on truncated boxes

ExifReader is a JavaScript Exif information parser. Prior to 4.40.1, ExifReader.load and the asynchronous file and URL loaders can pass attacker-supplied HEIC or AVIF data to the ISO-BMFF parser in src/image-header-iso-bmff.js, where findMetaBox and parseBox accept an eight-byte box header withou...