PT-2026-92371

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-77117: Loop with Unreachable Exit Condition

Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...

CVE-2026-80489: Loop with Unreachable Exit Condition

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

CVE-2026-80489: Loop with Unreachable Exit Condition

Converting crafted EUCJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some EUCJISX0213 sequences decode to two code points. If...

CVE-2026-77117: Loop with Unreachable Exit Condition

Converting crafted SHIFTJISX0213 input to UCS-4 or the internal wide character encoding, for example with iconv, in the GNU C Library version 2.3 to 2.44 may result in the converter making no progress, causing the calling application to hang. Some SHIFTJISX0213 sequences decode to two code points...

CVE-2026-51134

The C-MOR Video Surveillance web interface (up to version 6.0104 ) by za-internet GmbH is vulnerable to a Path Traversal vulnerability. An unauthenticated attacker can access arbitrary system files by sending specially crafted HTTP requests to the show-movies.pml component, specifically by using ...

PT-2026-98968

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elf x86 64 common section index of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit...

CVE-2026-91781: NULL Pointer Dereference

A security vulnerability has been detected in GNU Binutils 2.47. Affected is the function elfx8664commonsectionindex of the file bfd/elf64-x86-64.c of the component ELF Section Handler. The manipulation leads to null pointer dereference. The attack needs to be performed locally. The exploit has...

CVE-2026-51134

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

EUVD-2026-79997

The C-MOR Video Surveillance web interface up to version 6.0104 is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml...

GANADI: Uncovering C/C++ OSS Reuse Genealogies Via Pivotal Function-Based Clustering to Enhance Supply Chain Security

We present GANADI, a systematic approach for identifying C/C++ OSS reuse genealogies to enhance software supply chain security. Understanding OSS reuse genealogy is crucial for improving SBOM completeness and prioritizing security remediation across supply chains. Although existing approaches can...

CVE-2026-58766: Protection Mechanism Failure

In multiple functions of arm-smmu-v3.c, there is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-91903

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.47 Description A null pointer dereference occurs in the Dynamic Relocation Allocation component within the elf x86 allocate dynrelocs function of the bfd/elfxx-x86.c file. This issue can be triggered via a local approach...

rabbitmq-c -- remote client-side memory exhaustion

The rabbitmq-c project reports: A malicious AMQP peer can trigger memory exhaustion in rabbitmq-c clients by sending frames with unrecognised types or invalid channel numbers. The client allocates per-channel memory pools and stores complete frames before validating the channel against the...

CVE-2026-51133

A Cross-Site Scripting (XSS) vulnerability exists in za-internet GmbH C-MOR Video Surveillance version 6.0104 and below . The flaw allows a remote attacker to execute arbitrary client-side code by enticing an authenticated user to click crafted URLs. The vulnerability is triggered via the size pa...

CVE-2026-55301: Buffer Copy without Checking Size of Input

In Wave6VpuDecFlush of wave6.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-51133: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...

CVE-2026-58751: Use After Free

In multiple functions of arm-smmu-v3.c, there is a possible use-after-free due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-58747: Protection Mechanism Failure

In smmudetachdev of arm-smmu-v3.c, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79998

Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance = V6.0104 allows a remote attacker to execute arbitrary code via the size parameter in ptzpreset.pml component and the showmovies.pml component...