CVE-2026-66837

Stack-based Buffer Overflow, Integer Overflow or Wraparound vulnerability in Apache Thrift php bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

ALSA-2026:75583 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

The vulnerability of the sub_4468B0() function in TOTOLINK N150RT router microprogramming software allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the sub4468B0 function in TOTOLINK N150RT router microprogramming systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

Important: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...

Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

AlmaLinux 9 : ghostscript (ALSA-2026:74457)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:74457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

ROS-20261005-73-0008

The vulnerability in rsync is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gdi_Bitmap_Decompress() function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the gdiBitmapDecompress function in the libfreerdp/gdi/graphics.c file of the RDP client FreeRDP is related to an incorrect calculation of the buffer size. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and...

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...

CVEs-Custom-Exploit-Research-Lab

Vulnerable-Service-Exploit-Dev-Lab Real CVEs. Real exploits...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-88779link is external Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability This type of vulnerability is a...

duckdb:csv_json_fuzz_test: Heap-buffer-overflow in duckdb::StringValueResult::AddValueToVector

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=6310134532603904 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: csvjsonfuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_74424)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer...

Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_74457)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:22009-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22009-1 advisory. This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public...

CentOS Linux 6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-http-geoip / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1790586276)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1790586276 advisory. - When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes t...

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

RLSA-2026:74457 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...