Totolink X2000R boa formUploadFile stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the boa formUploadFile functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger thi...

Totolink X2000R boa formUpload() heap-based buffer overflow vulnerability

Summary A heap-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

Totolink X2000R boa formUpload() stack-based buffer overflow vulnerability

Summary A stack-based buffer overflow vulnerability exists in the boa formUpload functionality of X2000R versions: TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can make an authenticated HTTP request to trigger this...

Linux kernel PMBus Function Heap Buffer Overflow DoS

The vulnerability of the adm1275enablevouttemp function in the drivers/hwmon/pmbus/adm1275.c kernel module of the Linux operating system is related to insufficient control of resources during its existence. Exploiting this vulnerability could allow an attacker to compromise the confidentiality an...

Linux netfilter Heap Buffer Overflow DoS

The vulnerability of the nfconncountadd function in the net/netfilter/nfconncount.c component of the Linux operating system is related to the improper implementation of the control flow. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

PT-2026-118319

A stack-based buffer overflow vulnerability could allow a remote authenticated attacker to achieve arbitrary code execution...

Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: heap buffer overflow in CMS key unwrapping CVE-2026-63072 openssl: compat-openssl: DTLS Retransmi...

PT-2026-118633

Name of the Vulnerable Software and Affected Versions PEAK-System PCAN parser affected versions not specified Description The PCAN parser fails to validate the Data Length Code DLC value, allowing it to exceed 0x0f. This lack of enforcement enables an attacker to manipulate the length table index...

AlmaLinux 9.6 [TuxCare] Security Update: lrzsz Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792503867)

The AlmaLinux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792503867 advisory. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious...

Rocky Linux 9.6 [TuxCare] Security Update: lrzsz Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1792503867)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1792503867 advisory. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious...

ROS-20261020-73-0025

The vulnerability in freeipmi is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

PT-2026-120316

Summary A small attacker-supplied TIFF can be opened and loaded normally, then reach an out-of-bounds read when an application saves it back to TIFF with retained metadata. The fixed reproducer is a 1×1, 16-bit grayscale, PackBits-compressed TIFF containing tag 320 ColorMap with 768 SHORT values:...

Linux Kernel Heap Buffer Overflow DoS

The vulnerability of the nfnatregisterfn function in the net/netfilter/nfnatcore.c component of the Linux operating system is related to the execution of operations outside the buffer boundaries. Exploitation of this vulnerability could allow an attacker to compromise the confidentiality,...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-46294)

"In the Linux kernel, the following vulnerability has been resolved: dm: fix a buffer overflow in ioctl processing Tony Asleson using Claude found a buffer overflow in dm-ioctl in the function retrievestatus: 1. The code in retrievestatus checks that the output string fits into the output buffer...

MiracleLinux 8 : gimp:2.8 (AXSA:2026-2103:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2103:01 advisory. gimp: gimp: out-of-bounds write in lighting effects plugin via crafted preset file CVE-2026-90947 gimp: gimp: heap-based buffer overflow in ICO load...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-53183)

In the Linux kernel, the following vulnerability has been resolved: mptcp: allow subflow rcv wnd to shrink In MPTCP connection, the window field in the TCP header refers to the MPTCP-level rcvnxt and it's right edge should not move backward. Such constraint is enforced at DSS option generation...

Siemens SIMATIC S7-1500 TM MFP Improper Input Validation (CVE-2026-31694)

In the Linux kernel, the following vulnerability has been resolved: fuse: reject oversized dirents in page cache fuseadddirenttocache computes a serialized dirent size from the server-controlled namelen field and copies the dirent into a single page-cache page. The existing logic only checks...

AlmaLinux 9.2 [TuxCare] Security Update: bluez / bluez-cups / bluez-hid2hci / bluez-libs / bluez-libs-devel / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1792508765)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792508765 advisory. - BlueZ A2DP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers t...

MiracleLinux 8 : libsoup-2.62.3-19.el8_10 (AXSA:2026-2095:15)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2095:15 advisory. libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion CVE-2026-102556 libsoup: libsoup: Heap buffer overflow during...

AlmaLinux 8 : glibc (ALSA-2026:80798)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:80798 advisory. glibc: Fix out-of-bounds array write in tdelete CVE-2026-19542 glibc: Non-progress DoS in SHIFTJISX0213 - CVE-2026-77117 glibc: Non-progress DoS in...