CVE-2026-54577

mport is the MidnightBSD Package Manager. Prior to 2.7.8, the audit command in mport/mport.c computed option-adjusted localargv and localargc values but passed the original argument entry to auditpackage. When an operator or automation used an option such as -r before a package name, stale optind...

CVE-2026-54577

mport , the MidnightBSD Package Manager, contained a bug in its audit command prior to version 2.7.8. The function in mport/mport.c computed option-adjusted local arguments but passed the original argument entry to audit_package(). When an operator or automation used an option such as -r before a...

CVE-2021-3156

CVE-2021-3156 En este documento incluimos todo el conocimiento necesario para entender el código de este repositorio y por qué funciona. Toda la explicación se basa en el informe creado por QUALYS. Allí se explican otras formas de explotación. Requisitos Las versiones vulnerables de sudo son las...

CVE-2019-14287-demo

Contenedor de demostración de CVE-2019-14287 Este es un contenedor construido con fines de demostración que tiene una versión del comando sudo vulnerable a CVE-2019-14287 https://www.sudo.ws/alerts/minus1uid.html. Este contenedor se puede ejecutar con: docker run -ti...

CVE-2026-84256

A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system...

CVE-2026-84256

An argument parsing issue in OpenVPN 2.1rc10 through 2.6.22 and 2.7alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject...

CVE-2026-84256

An argument parsing issue in OpenVPN versions 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject. The CVSS 4.0 base score is 7.7 (HIGH) , with network attack vector, low complexity, pres...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: Rejects option groups without values. The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and provides only a recognized option name, such as “cachemode”, will...

UBUNTU-CVE-2026-72104

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

CVE-2026-72104 dm-pcache: reject option groups without values

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the readargs function. An attacker can corrupt adjacent heap memory by sending a crafted argument list that causes the allocation for arguments to be exactly full, resulting in a write of a NULL terminator one sl...

CVE-2026-70456 rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()

rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

EUVD-2026-56120

A vulnerability has been identified in Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current...

CVE-2026-59086

CVE-2026-59086 affects Simcenter Nastran before version V2606. The vulnerability is a stack overflow when parsing specially crafted strings as an argument to a binary, which could allow code execution in the current process. The connected documents confirm the same description across sources (NVD...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

CVE-2026-59086

A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...

DEBIAN-CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...

CVE-2026-18370

entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...