Important: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2026:0344-1 Rating: critical References: 1283262 Cross-References: CVE-2026-102299 CVE-2026-102300 CVE-2026-102301 CVE-2026-102302 CVE-2026-102303 CVE-2026-102304 CVE-2026-102305 CVE-2026-102306 CVE-2026-102307...

ROS-20261005-73-0009

The vulnerability of the readargs function in the Rsync utility for file transfer and synchronization is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

ROS-20261005-73-0007

The vulnerability of the HLINKBUMP module in the Rsync file transfer and synchronization utility is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

ROS-20261005-73-0008

The vulnerability in rsync is related to incorrect calculation of the buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20261005-73-0004

The vulnerability of the addimpliedinclude function in the rsync network daemon—a utility for transferring and synchronizing files—is related to buffer overflow attacks. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

AlmaLinux 9 : ghostscript (ALSA-2026:74457)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:74457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

CVEs-Custom-Exploit-Research-Lab

Vulnerable-Service-Exploit-Dev-Lab Real CVEs. Real exploits...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-88779link is external Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability This type of vulnerability is a...

duckdb:csv_json_fuzz_test: Heap-buffer-overflow in duckdb::StringValueResult::AddValueToVector

Project: https://github.com/duckdb/duckdb.git Detailed Report: https://oss-fuzz.com/testcase?key=6310134532603904 Project: duckdb Fuzzing Engine: libFuzzer Fuzz Target: csvjsonfuzztest Job Type: libfuzzerasanduckdb Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address:...

CVE-2026-88779: Improper Restriction of Operations within the Bounds of a Memory Buffer

Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS, and before 13.1-37.282; Gateway: before 14.1-73.41 and before 13.1-64.28...

openSUSE 16 Security Update : rustup (openSUSE-SU-2026:22016-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22016-1 advisory. - CVE-2024-12224: idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded bsc1243862. - CVE-2025-58160:...

Rocky Linux 9 [CIQ] Security Update: libvirt / libvirt-client / libvirt-client-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_74424)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202674424 advisory. libvirt: swtpm privilege escalation via symlink following CVE-2026-63622 libvirt: Integer overflow in NodeGetFreePages RPC handler leading to heap buffer...

openSUSE 16: jline3 / jline3-builtins / jline3-console / jline3-console-ui / etc (openSUSE-SU-2026:22009-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22009-1 advisory. This update for jline3 fixes the following issue: Update to upstream version 3.30.17: Security Fixes + Native Stack Buffer Overflow in Public...

CentOS Linux 6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-http-geoip / etc Multiple Vulnerabilities (CENTOS6:CLSA-2026:1790586276)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1790586276 advisory. - When the ngxmailauthhttpmodule module is enabled on NGINX Plus or NGINX Open Source, undisclosed requests can cause worker processes t...

Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability

Citrix NetScaler ADC formerly Citrix ADC and Citrix NetScaler Gateway formerly Citrix Gateway contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service...

Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc (crlsa-2026_74457)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674457 advisory. ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter CVE-2026-39919 Tenable has extracted the preceding description block directly from the...

RLSA-2026:74424 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

libvirt security, bug fix, and enhancement update

An update is available for libvirt. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...