CVE-2026-41567

CVE-2026-41567 1day Um 1day para Docker Escape CVE-2026-41567. É uma demonstração de escape de docker usando xz / unpigz trojanizados. Pode ser facilmente modificado para uso remoto ou seja, basta modificar o IP padrão do docker para um C2 remoto. Mais informações sobre o exploit aqui PoC Execute...

sec_review_cve-2024-3094

CVE-2024-3094 की ओपन सोर्स भेद्यता का पूर्ण सुरक्षा समीक्षा security review किया गया। प्राप्त आंकड़ों के आधार पर निम्नलिखित तैयार किए गए: 1. रिपोर्ट "ThreatModel + SecurityReview" – खतरों का विस्तृत विवरण, शोषण के मार्ग, जोखिम मूल्यांकन और हमले की सतह को कम करने के लिए अनुशंसाएँ। 2. सत्यापन...

xz-backdoor-links

apocalypxze: backdoor xz 2024 também conhecido como CVE-2024-3094 – links relacionados Mais uma tentativa de reunir links relevantes sobre o backdoor xz 2024 também conhecido como CVE-2024-3094. Termo "Apocalypxze" emprestado do toot de Jonathan Corbet. Versão raw:...

CVE-2024-3094-checker

CVE-2024-3094 जाँचकर्ता xz Utils के संस्करण 5.6.0 और 5.6.1 समझौता किए गए प्रतीत होते हैं। XZ Utils डेटा संपीड़न सॉफ़्टवेयर है और Linux वितरणों में मौजूद हो सकता है। दुर्भावनापूर्ण कोड प्रभावित प्रणालियों तक अनधिकृत पहुंच की अनुमति दे सकता है। स्रोत: https://vulners.com/cve/CVE-2024-3094...

Malicious code in date-fmt-helper-xz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b384650ec0fabdd01a7dfc513cccd25156611a04c17ba0c435b950ddb9215777 date-fmt-helper-xz ships a postinstall.js that runs automatically on npm install. The script opens a TCP connection to the hardcoded remote host...

Astra Linux – Vulnerability in xz-utils

XZ Utils provides a general-purpose data-compression library along with command-line tools. Prior to version 5.8.3, if the lzmaindexdecoder function was used to decode an Index that contained no Records, the resulting lzmaindex would be in a state where subsequent calls to lzmaindex.Append would...

Photon OS 5.0: Xz PHSA-2025-5.0-91-0496

An update of the xz package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-91-0496. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] [DLA 4718-1] 7zip security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4718-1 [email protected] https://www.debian.org/lts/security/ Sylvain Beucler August 05, 2026 https://wiki.debian.org/LTS -...

SUSE CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-14266

A flaw was found in 7-Zip. This vulnerability allows a remote attacker to execute arbitrary code on affected installations. Exploitation requires user interaction, such as opening a specially crafted malicious file or visiting a malicious web page. The flaw occurs during the processing of...

CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

EUVD-2026-50420

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-14266

Summary: CVE-2026-14266 affects 7-Zip 26.01 and earlier in the multi-threaded XZ decoder path. A heap-based buffer overflow in MixCoder_Code() occurs when processing crafted XZ data, allowing potential remote code execution and denial of service. Root cause: missing boundary clamp on destLen2 in ...

CVE-2026-14266

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

CVE-2026-14266 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page...

Exploit for CVE-2026-14266

CVE-2026-14266 — 7-Zip XZ Decoder Heap Buffer Overflow Cr...

Exploit for CVE-2026-14266

CVE-2026-14266: 7-Zip XZ Heap Buffer Overflow PoC Generator P...

[SECURITY] [DLA 4690-1] xz-utils security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb July 20, 2026 https://wiki.debian.org/LTS -...

Debian dla-4690 : liblzma-dev - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4690 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4690-1 [email protected] https://www.debian.org/lts/security/...