Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread pointer...

SUSE-SU-2026:4640-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 RT kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2024-26730: hwmon: nct6775 Fix access to temperature configuration registers bsc1222538. - CVE-2025-38704: rcu/nocb: Fix possible invalid rdp's-nocbcbkthread...

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2026-64422: net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes bsc1273290. CVE-2026-64580: xfrm6: clear dst.dev on error to avoid double netdevput in...

CVE-2026-109240

A flaw was found in FreeRDP. A malicious Remote Desktop Protocol RDP server can cause a Denial of Service DoS by sending a specially crafted request with an unvalidated buffer size over the USB redirection channel. This missing bounds check triggers an internal assertion failure that immediately...

CVE-2026-109256

A flaw was found in FreeRDP. A remote attacker acting as a malicious Remote Desktop Protocol RDP clipboard peer can cause a Denial of Service DoS by sending a specially crafted image over the clipboard channel. When the client converts the image to the PNG format, a memory reallocation failure...

CVE-2026-109250

A flaw was found in FreeRDP. This vulnerability allows a local attacker with access to a physical smartcard or token to trigger a heap-based buffer overflow during smartcard key enumeration. By presenting more public key objects across multiple slots than the internal storage buffer can hold, an...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG Image Processing Memory Corruption Summary A vulnerability in Apple’s image processing RawCamera.bundle affects iOS 18.6.1 and macOS. The issue occurs when DNG files contain mismatched TIFF metadata and JPEG Lossless parameters , leading to memory...

patch-CVE-2026-08742

Patch: CVE-2026-08742 Vulnerability Details CVE : CVE-2026-08742 Product : Citrix ADC Description : Buffer overflow Severity : Critical Patch Status: DEPLOYED Field| Value ---|--- Patch Date| 2026-03-20 Status| deployed Deployed To| Production Validated By| SecOps Team References NVD CISA KEV...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Detection Artifact Generator for Citrix NetScaler CVE-2026-88772 See our blog post for technical details. Detection in Action / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / /...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN Pre-Authentication Remote Code Execution Description CVE-2022-42475 is a heap-based buffer overflow vulnerability in the FortiOS SSL VPN service that allows unauthenticated attackers to remotely execute arbitrary code RCE via specially crafted HTTP requests...

CVE-2026-109157

A vulnerability was found in TRENDnet TEW-432BRP 3.10B20. Affected by this vulnerability is the function formTcpipSetup of the file /goform/formTcpipSetup. Performing a manipulation of the argument Name results in stack-based buffer overflow. It is possible to initiate the attack remotely. The...

Blackash-CVE-2025-48593

🚨 CVE-2025-48593 Zero-Click Remote Code Execution in Android System 🚨 "A single malicious packet can own your device." — Android Security Team, Nov 2025 🎯 Vulnerability Snapshot Attribute| Details ---|--- CVE ID| CVE-2025-48593 Severity| 🔴 Critical RCE, Zero-Click CVSS Est.| 9.8 Pending NVD...

CVE-2026-109255

A flaw was found in FreeRDP. An integer truncation issue in license stream length validation allows a malicious Remote Desktop Protocol RDP server to bypass size checks by sending a specially crafted licensing request. This flaw leads to an undersized memory allocation and a heap-based buffer...

cve-2025-29384

CVE-2025-29384 Proof-of-Concept Exploit Overview This repository contains an advanced proof-of-concept PoC exploit for CVE-2025-29384 , a critical stack-based buffer overflow vulnerability discovered in the Tenda AC9 router running firmware version V15.03.05.14multi. This vulnerability allows...

CVE20265172poc

CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses on crafted resource record PoC Topology read here https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps​ 1. vi /etc/dnsmasq.conf​ port=5353​...

CVE-2026-38426

CVE-2026-38426: strcpy Stack Buffer Overflow in Tasmota fetchjpg boundary40 CVE: CVE-2026-38426 Severity: Critical CVSS 9.8 Product: Arendst Tasmota Affected Version: = 15.3.0.3 File: tasmota/tasmotaxdrvdriver/xdrv10scripter.ino Function: fetchjpg — case 0 initial connection Author: Saidakbarxon...

CVE-2026-9256-Poc

nginx ngxhttprewritemodule Heap Buffer Overflow Description nginx Plus and nginx Open Source ngxhttprewritemodule contains a heap buffer overflow vulnerability. When a rewrite directive uses a regex with multiple overlapping PCRE capture groups e.g. ^/.$ and a replacement referencing multiple...

thm-cybersec-portfolio

TryHackMe Notes — Cybersecurity Portfolio Personal notes and summaries of completed TryHackMe rooms. Built as a study reference and portfolio for IT security roles. Completed Rooms | Room| Topic ---|---|--- 01| Linux Privilege Escalation| Linux privesc techniques 02| Sudo Buffer Overflow|...

rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service

A flaw was found in rabbitmq-c. A malicious AMQP Advanced Message Queuing Protocol server or an on-path attacker can send an undersized frame size during the login handshake. This can lead to a heap buffer overflow, causing memory corruption and potentially a denial of service. Code execution is...

Important: Red Hat Security Advisory: librabbitmq security update

An update for librabbitmq is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...