CVE-2026-21399

A flaw was found in the Intel Open Volume Kernel Library Intel Open VKL. This heap-based buffer overflow vulnerability, present in user applications, could allow an authenticated local attacker to trigger a denial of service. This attack has low complexity and requires no user interaction,...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS

Summary Updated Aug 21, 2026: Updated the summary to highlight the additional installation instructions. IBM is providing security updates for supported AIX and VIOS releases that are under active fix support. Delivered through Service Packs SPs and Fix Packs FPs, these updates remediate...

Exploit for Heap-based Buffer Overflow in Google Chrome

CVE-2026-76036 — Dawn WebGPU NPOT Depth/Stencil Mipmap Detec...

Security update for 389-ds

This update for 389-ds fixes the following issues: CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065...

SUSE-SU-2026:3678-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2026-11774: integer overflow in SASL packet length bypasses size limit leading to heap buffer overflow bsc1268298. - CVE-2026-11785: type confusion in the SSO token handler can cause partial stack address information disclosure bsc1268065. ...

CVE-2026-76888

A flaw was found in Wireshark. A remote attacker could exploit a heap-based buffer overflow vulnerability within the RDP Remote Desktop Protocol dissector. By crafting a malicious RDP packet, an attacker could cause the Wireshark application to crash, leading to a denial of service. Mitigation Do...

CVE-2026-76887

A flaw was found in Wireshark. This heap-based buffer overflow vulnerability in the dissection engine could allow a remote attacker to cause a denial of service. Exploitation requires a user to process a specially crafted network packet, leading to a crash of the application. Mitigation Do not op...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:57251 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor amdgpugemvaioctl for Handling Last Fence Update and Timeline Management v4 CVE-2026-4323...

nginx-map-risk-audit

CVE-2026-42533: مراجعة مخاطر NGINX Map Regex ملاحظة بحثية دفاعية حول CVE-2026-42533، وهو تجاوز سعة مخزن مؤقت في كومة الذاكرة heap buffer overflow في معالجة طلبات NGINX، مرتبط بتوجيهات map مع التقاطات تعبيرات نمطية وأنماط معينة لتقييم المتغيرات. بعبارات بسيطة: NGINX هو برنامج خادم ويب ووكيل عكسي...

CVE-2026-74556

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

ROOT-OS-DEBIAN-11-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:11. Multiple fixed versions available...

Exploit for CVE-2026-39113

CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLA...

CVE-2026-74452

A flaw was found in the Linux kernel's drm/panthor component. This vulnerability allows a local attacker, by providing a specially crafted firmware, to cause a heap buffer overflow. This occurs because the data size to copy is not validated against the allocated section size, potentially leading ...

S5Late

S5Late Exploit tethered del bootrom/DFU per iPod. Attualmente supporta solo Nano 7G; per supportare Nano 6G è necessario aggiornare gli offset. Esecuzione Metti l'iPod in modalità DFU. Poi esegui: root@kitploit: ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Device in DFU mode...

kernel security, bug fix, and enhancement update

An update is available for kernel. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel packages contain the Linux kernel, the core of any Linux operating...

RLSA-2026:57252 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: netfilter: nfconntrackh323: fix OOB read in decodechoice CVE-2026-43233 kernel: drm/amdkfd: Fix out-of-bounds write in kfdeventpageset CVE-2026-43206 kernel: drm/amdgpu: Refactor...

XAMPPv3.3.0-BOF

XAMPPv3.3.0-BOF Codice di exploit Proof-of-Concept per XAMPP v3.3.0 — '.ini' Buffer Overflow Unicode + SEH Passaggi per riprodurre: 1. Esegui lo script Python "poc.py", creerà un nuovo file "xampp-control.ini" 2. Apri l'applicazione xampp-control.exe 3. Fai clic sul pulsante "admin" di fronte a...

Chromium: CVE-2026-76034 Buffer overflow in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...