CVE-2026-98171 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

EUVD-2026-93099

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

CVE-2026-98171 smb: client: fix next_buffer UAF and NextCommand bounds in compound PDUs

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 스택 오버플로우 PoC lwIP의 SNMPv3 USM 핸들러에서 발생하는 치명적인 스택 기반 버퍼 오버플로우인 CVE-2026-8836에 대한 개념 증명 익스플로잇입니다. 취약점 CVE : CVE-2026-8836 CVSS : 9.8 치명적 구성 요소 : snmpparseinboundframe in src/apps/snmp/snmpmsg.c 근본 원인 : snmpasn1decraw의 주석 처리된 경계 검사 및 잘못된 버퍼 크기 매개변수 버퍼 :...

CVE-2026-94271

The Deema Payment Gateway WordPress plugin through 1.1.2 does not verify the payment with the payment provider when handling the return from the hosted checkout, and does not check the payment status or amount, allowing unauthenticated users to have orders marked as paid without any payment being...

CVE-2026-25302

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

CVE-2026-25302

A cryptographic issue exists during the processing of non-ELF partitions , where authentication and signature checks are bypassed. This allows unsigned or corrupted images to be mounted and processed. The vulnerability is associated with Qualcomm hardware/software as indicated by the CVSS source....

CVE-2026-25302 Improper Verification of Cryptographic Signature in Boot

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

EUVD-2026-92978

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

rapid-reset-check

Rapid Reset Check rapid-reset-check は、HTTP/2 を公開しているため CVE-2023-44487 の緩和策レビューが必要な HTTPS エンドポイントを迅速に棚卸しするための小さな Go CLI です。 このスキャナは意図的に非悪用型です。各ターゲットを解決し、証明書を検証した TLS 接続を開き、ALPN を通じて h2 と http/1.1 を提示し、ピアが選択したものを記録して接続を閉じます。HTTP リクエスト、HTTP/2 接続プリアンブル、ストリーム、RSTSTREAM フレーム、フラッドトラフィックは一切送信しません。...

CVE-2026-104380

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

watchTowr-vs-Check-Point-CVE-2026-50751

CVE-2026-50751 Check Point Remote Access VPN IKEv1 인증서 인증 우회 탐지 아티팩트 생성기입니다. https://github.com/user-attachments/assets/1280c545-364e-42d1-94ac-5b2cd850d14e 기술적 세부 사항은 블로그 게시물을 참조하세요. 탐지 동작 $ python3 watchTowr-vs-Check-Point-CVE-2026-50751.py -rh vpn.example.com -u watchtowr / | | |\ \ \ / / \ ...

CVE-2026-104380

Punk versions 0.48 before 0.55 are vulnerable to a missing Origin validation in the ps_serve_one function during Perl route Extended CONNECT requests. On HTTP/2 and HTTP/3 , a WebSocket handshake is treated as an Extended CONNECT and matched as a GET request. Because the Origin check only trigger...

EUVD-2026-92915

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

CVE-2026-104380 Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in ps_serve_one

Punk versions from 0.48 before 0.55 for Perl route Extended CONNECT requests to any GET route without an Origin check in psserveone. On HTTP/2 and HTTP/3 a WebSocket handshake arrives as an Extended CONNECT, which is matched as a GET and so reaches every GET route, API operation and mount. The...

CLEANSTART-2026-AH42330 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

CVE-2026-42508 affects multiple packages. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. See references for individual vulnerability details...

CVE-2026-105783

Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to 3.7.13, when Joplin Desktop is running with the opt-in Web Clipper server enabled, the server in packages/lib/ClipperServer.ts sends Access-Control-Allow-Origin: and allows an...

CVE-2026-104033 Sssd: sssd: access control bypass via improper ldap shadow expiration check

A flaw was found in SSSD. When configured to enforce account expiration using LDAP Lightweight Directory Access Protocol shadow attributes, SSSD fails to treat an expiration value of zero as an expired account. A user with valid credentials for an expired account can exploit this flaw to bypass...

Linux Distros Unpatched Vulnerability : CVE-2026-98171

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in...

PT-2026-106510

In the Linux kernel, the following vulnerability has been resolved: drm/gud: fix out-of-bounds write in gud plane atomic check The plane property loop uses req-propertiesnum properties + i as write index while simultaneously incrementing num properties inside the loop. At iteration i, num...