Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : p11-kit vulnerabilities (USN-8687-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8687-1 advisory. It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cau...

USN-8687-1: p11-kit vulnerabilities

It was discovered that p11-kit incorrectly handled certain RPC messages. A local attacker could use this issue to cause p11-kit to crash, resulting in a denial of service. CVE-2026-13757 It was discovered that p11-kit incorrectly handled nested attribute decoding on 32-bit systems. A local attack...

FacturaScripts: Stored XSS in WidgetVariante and WidgetSubcuenta modal lists via HTML-attribute decoding of `Tools::noHtml`-escaped quotes inside `onclick=`

Summary WidgetVariante::renderVariantList Core/Lib/Widget/WidgetVariante.php:298-330 and WidgetSubcuenta::renderSubaccountList Core/Lib/Widget/WidgetSubcuenta.php:290-321 build the row for each modal hit by concatenating the user-controlled referencia / codsubcuenta field directly into a...

GoBGP security vulnerabilities

GoBGP is an open-source implementation of the Border Gateway Protocol BGP developed by osrg. Versions of GoBGP prior to 4.3.0 contained security vulnerabilities. These vulnerabilities stemmed from a function in the SRv6 L3 Service component called pkg/packet/bgp/prefixsid.go. The function...

hdf5:h5_extended_fuzzer: Heap-buffer-overflow in H5MM_strndup

Detailed Report: https://oss-fuzz.com/testcase?key=5197640355610624 Project: hdf5 Fuzzing Engine: afl Fuzz Target: h5extendedfuzzer Job Type: aflasanhdf5 Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x612000027758 Crash State: H5MMstrndup H5Oattrshareddecode...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_memcpy

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=5174799678701568 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x613000027e98 Crash State:...

matio:matio_fuzzer: Heap-buffer-overflow in H5MM_strdup

Project: git://git.code.sf.net/p/matio/matio Detailed Report: https://oss-fuzz.com/testcase?key=4890427023687680 Project: matio Fuzzing Engine: libFuzzer Fuzz Target: matiofuzzer Job Type: libfuzzerasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address: 0x6110000009d0...