The vulnerability of the cpp-httplib library in the C++ programming language allows a hacker to cause a service failure.

The vulnerability of the cpp-httplib library in the C++ programming language is related to an uncontrolled consumption of resources. Exploiting this vulnerability may allow a malicious actor to cause service failures...

Huawei EulerOS: Security Advisory for glibc (EulerOS-SA-2026-1013)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-12495

An issue was discovered in Tiny C Compiler aka TinyCC or TCC 0.9.27. Compiling a crafted source file leads to a one-byte out-of-bounds write in the gsymaddr function in x8664-gen.c. This occurs because tccasm.c mishandles section switches...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: cargo-audit, zed, samply, deno, lychee, oxipng, fd, wasmcloud, yara-x, starship, rust-analyzer, yazi, pixi, oranda, nushell, ruff, wadm, cargo-c...

CVE-2025-4574 vulnerabilities

Vulnerabilities for packages: cargo-c, oxipng, wadm, nushell, ruff, fd, ztunnel-fips, yara-x, lychee, starship, deno, wasmcloud, ztunnel, samply, cargo-audit, pixi, yazi, oranda, zed, rust-analyzer...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000193)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000193 advisory. In arch/x86/lib/insn-eval.c in the Linux kernel before 5.1.9, there is a use-after-free for access to an LDT entry because of a race condition between modifyldt and ...

c-ares-devel-1.34.6-1.1 on GA media (moderate)

c-ares-devel-1.34.6-1.1 on GA media Announcement ID: openSUSE-SU-2026:10007-1 Rating: moderate Cross-References: CVE-2025-62408 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...

OPENSUSE-SU-2026:10007-1 c-ares-devel-1.34.6-1.1 on GA media

These are all security issues fixed in the c-ares-devel-1.34.6-1.1 package on the GA media of openSUSE Tumbleweed...

heap-mastery-course

Heap Mastery Course Learn heap vulnerability exploitation t...

CVE-2025-15419 Open5GS GTPv2-C Flow s5c-handler.c sgwc_s5c_handle_create_session_response denial of service

A weakness has been identified in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c of the component GTPv2-C Flow Handler. Executing a manipulation can lead to denial of service. The attack needs to be launched locall...

CVE-2025-15417 Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwcs11handlecreatesessionrequest of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is public...

CVE-2026-21428

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. Prior to version 0.30.0, the writeheaders function does not check for CR & LF characters in user supplied headers, allowing untrusted header value to escape header lines. This vulnerability allows attackers to add...

CVE-2025-65411

A flaw was found in GNU Unrtf. This vulnerability, a NULL pointer dereference in the src/path.c component, allows an attacker to cause a Denial of Service DoS by injecting a specially crafted payload into the searchpath parameter. This can lead to the application becoming unresponsive or crashing...

PT-2026-26671

Name of the Vulnerable Software and Affected Versions GNU C library versions 2.34 through 2.43 Description The GNU C library’s gethostbyaddr and gethostbyaddr r functions, when used with a configured nsswitch.conf file specifying the library’s DNS backend, may return invalid DNS hostnames. This...

PT-2026-25791

Name of the Vulnerable Software and Affected Versions Expat affected versions not specified Description The Expat parser, when used with a registered ElementDeclHandler, is susceptible to a C stack overflow when processing an inline document type definition with a deeply nested content model. Thi...

PT-2026-25938

CVE-2026-4359 A compromised third party cloud server or man-in-the-middle attacker could send a malformed HTTP response and cause a crash in applications using the MongoDB C driver. https://t.co/CeMfkBeSoo...

GHSA-WCJ4-JW5J-44WH CBORDecoder reuse can leak shareable values across decode calls

Summary When a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory and can be accessed by subsequent CBOR messages using the sharedref tag 29. This allows an attacker-controlled message to read data from previously decoded...

Command Injection through bash -c

This report is not public...

SQL injection vulnerability in U8+ Channel Management (Advanced Edition) at UFIDA Network Technology Co. Ltd (CNVD-C-2025-1245200)

U8+ Channel Management Advanced Edition is a set of channel management software, together with U8+ supply chain system and financial system, extending the enterprise management radius from the internal enterprise to the distribution channels and sales terminals. A SQL injection vulnerability exis...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993118)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993118 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: Fix null pointer dereference in trace ucsiregisteraltmode checks ISERR for the...