CVE-2026-121994 Gdb: gdb: stack buffer overflow in fetch_register_using_p via unchecked p-reply length

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-121994

A stack buffer overflow in the GDB client's remote protocol handler allows an attacker-controlled debug target to execute arbitrary code in the GDB process. The vulnerability exists in fetchregisterusingp, which decodes a stub's register reply into an alloca-sized buffer without bounding writes b...

CVE-2026-97371

The network traffic monitoring application ntopng is vulnerable to a stack buffer overflow (write) in the nDPI custom category detection mechanism. The flaw exists in the ndpi_get_custom_category_match function, where a four-byte nDPI protocol-category value is written through a pointer to a two-...

CVE-2026-97371 ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...

CVE-2026-97371 ntopng: Stack buffer overflow (write) in nDPI custom category detection allows remote code execution via crafted network packets

ntopng is a web-based network traffic monitoring application. Prior to 6.7.260721, ndpigetcustomcategorymatch writes a four-byte nDPI protocol-category value through a pointer to the two-byte id variable in IpAddress::reloadBlacklist in src/IpAddress.cpp during packet dissection and host...

CVE-2021-44228

🚨 CVE-2021-44228 — “Log4Shell” A critical remote code execution vulnerability in Apache Log4j 2 , widely known as Log4Shell. 📖 Table of Contents Overview Technical Details Severity & CVSS Affected Versions Exploitation & Impact Real-World Impact Detection Mitigation & Fixes Summary 🔎 Overview...

CVE-2025-8110

RCE - CVE-2025-59528 Gogs = 0.13.3 Exploit $ python3 CVE-2025-8110.py -h usage: CVE-2025-8110.py -h -u URL -lh HOST -lp PORT -user USERNAME -pass PASSWORD -x CVE-2025-8110 Gogs Exploit options: -h, --help show this help message and exit -u, --url URL Gogs base URL e.g., http://127.0.0.1:3000 -lh,...

Exploit for CVE-2026-98432

CVE-2026-98432 — Temporary Ubuntu iptables Mitigation Tem...

EUVD-2026-117540

mpv 0.29.0 before 0.42.0 contains a playlist injection vulnerability in the bundled ytdlhook script that allows remote attackers to add unchecked entries by embedding newlines in playlist URLs. Attackers controlling a feed or page can bypass urlissafe to open file:// or av:// inputs, reading loca...

CVE-2026-123095

The mpv media player (versions 0.29.0 before 0.42.0 ) is vulnerable to a playlist injection flaw in the bundled ytdl_hook script. The root cause is the improper neutralization of CRLF sequences, allowing remote attackers to bypass the url_is_safe() check by embedding newlines in playlist URLs. Th...

CVE-2026-122329 SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in AIFF Decoder

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

EUVD-2026-117536

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

CVE-2026-122328

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) contains a stack-based buffer overflow vulnerability in the FetchXLaw() function within src/decoder_wav.c. The issue occurs during the decoding of A-law or mu-law WAV files . An attacker can provide a crafted WAV file that triggers a doubly-of...

EUVD-2026-117537

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow in FetchXLaw in src/decoderaiff.c due to miscalculated output offsets when expanding A-law or mu-law samples. Attackers can supply a crafted AIFF-C file that overwrites roughly 1 KB of adjacent stack memory when decoded, causing...

CVE-2026-122329

The SDL_mixer library (versions 3.1.2 through 3.2.4 ) is vulnerable to a stack-based buffer overflow within the FetchXLaw() function in src/decoder_aiff.c. This flaw stems from miscalculated output offsets during the expansion of A-law or mu-law samples. An attacker can trigger this by providing ...

CVE-2026-122328 SDL_mixer 3.1.2 through 3.2.4 Stack-based Buffer Overflow via FetchXLaw() in WAV Decoder

SDLmixer 3.1.2 through 3.2.4 contains a stack-based buffer overflow vulnerability in FetchXLaw of src/decoderwav.c when decoding A-law or mu-law WAV files. Attackers can supply a crafted WAV file whose doubly-offset float expansion overwrites about 1 KB of adjacent stack memory, causing crashes o...

flatpak: Flatpak: Arbitrary code execution via missing symlink protection

A flaw was found in Flatpak. A malicious sandboxed application can exploit missing symlink protection during the creation and bind-mounting of app data directories. By manipulating attacker-controlled path components, a malicious symlink can redirect these directories to arbitrary locations on th...

Important: Red Hat Security Advisory: flatpak security update

An update for flatpak is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...

flatpak: flatpak: Buffer overflow in OCI delta stream path names on 32-bit systems

The OCI delta stream parser read sizes as guint64 but passed them to GLib I/O and allocation functions expecting gsize 32 bits on 32-bit systems, causing undersized allocations while subsequent operations use the original 64-bit size, leading to heap buffer overflows. An attacker controlling an O...

CVE-2026-35273

🚨 CVE-2026-35273 - Oracle PeopleSoft PeopleTools Unauthenticated Remote Code Execution ⚠️ Critical Unauthenticated RCE in Oracle PeopleSoft PeopleTools A vulnerability affecting Oracle PeopleSoft Enterprise PeopleTools that allows remote attackers to compromise vulnerable systems without...