CGA-JM78-XVF3-HH23

Bulletin has no description...

DEBIAN-CVE-2022-4993

HTML::FormHandler versions through 0.40068 for Perl allow attacker selected method dispatch and resource exhaustion because applyactions and adderror use error message text built from request data as a Locale::Maketext bracket notation template. adderror hands its first argument to the language...

CGA-C83V-688Q-33W9

Bulletin has no description...

CVE-2026-14863

creationtimestamp| type| source ---|---|--- 2026-08-13 16:58:54+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117089260878905642 2026-08-14 05:25:20+00:00| seen| https://bsky.app/profile/hermes71.bsky.social/post/3mszg7yjidu2m 2026-08-15 01:51:48+00:00| seen|...

CVE-2026-66453

creationtimestamp| type| source ---|---|--- 2026-08-13 16:10:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxzryihv42e...

CVE-2026-66424

creationtimestamp| type| source ---|---|--- 2026-08-13 16:00:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxza2zx6j2e...

GHSA-RM43-82J9-R4MJ

creationtimestamp| type| source ---|---|--- 2026-08-13 15:33:17+00:00| seen| https://gist.github.com/alon710/d62f1422f9dac4c6a1fc5e9b8b380828...

CVE-2026-61962

creationtimestamp| type| source ---|---|--- 2026-08-13 15:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3msxxkffzo42p 2026-08-15 08:00:05+00:00| seen| Telegram/hhF5X9l-443ICg7ZpS9-uwcd7Zf9SpAraBV0rI1xxNpeeM0 2026-08-16 00:00:46+00:00| published-proof-of-concept|...

DEBIAN-CVE-2026-70456

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...

DEBIAN-CVE-2026-70455

rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string matching on long option names. Attackers can specify --zt=N...

DEBIAN-CVE-2026-70459

rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory. The daemon dereferences the first file list entry as a director...

DEBIAN-CVE-2026-70453

rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hashsearch function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list. A sender can exploit the quadratic-time worst-case behavior in hash lookups to exhaust receive...

DEBIAN-CVE-2026-68453

In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in ccacipher2protkey Add validation of both the actual key buffer size and token length fields in all the ccachecksectoken functions. Additionally check in ccagencipherkey for possible underflow...

DEBIAN-CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics paths. Attackers can exploit rsync's failure to reject...

DEBIAN-CVE-2026-53802

rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a...

DEBIAN-CVE-2026-53800

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion. Attackers can atomically substitute a symlink for a source file between transfer completion and the unlink...

DEBIAN-CVE-2026-53789

rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to reclassify implied parent directory entries or treat synthetic...

DEBIAN-CVE-2026-53790

rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNCCONNECTPROG environment variable, daemon hooks, the rsync-ssl wrapper, and remote-shel...

DEBIAN-CVE-2026-53786

rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives. Attackers can inject client-side merge file directives during filter evaluation to introduce rules...

UBUNTU-CVE-2026-70456

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...