PT-2026-34235

Description Noir programs can invoke external functions through foreign calls. When compiling to Brillig bytecode, the SSA instructions are processed block-by-block in BrilligBlock::compile block. When the compiler encounters an Instruction::Call with a Value::ForeignFunction target, it invokes...

PT-2026-34018

Name of the Vulnerable Software and Affected Versions LogScale affected versions not specified Description An unauthenticated path traversal issue exists in a specific cluster API endpoint. If this endpoint is exposed, a remote attacker can read arbitrary files from the server filesystem without...

PT-2026-33971

Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.34 Firefox ESR version 140.9 Thunderbird ESR version 140.9 Firefox version 149 Thunderbird version 149 Description Memory safety bugs involving memory corruption could allow an attacker to run arbitrary code...

zeek:zeek-dns-fuzzer: Heap-buffer-overflow in zeek::analyzer::dns::detail::DNS_Interpreter::Parse_SvcParams

Project: https://github.com/zeek/zeek.git Detailed Report: https://oss-fuzz.com/testcase?key=5530428152020992 Project: zeek Fuzzing Engine: libFuzzer Fuzz Target: zeek-dns-fuzzer Job Type: libfuzzerasanzeek Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x75600c950d97...

matio:matio_fuzzer: Heap-buffer-overflow in ParseOpaqueMetadata

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=5213059865182208 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash...

haproxy:fuzz_h1_htx: Memcpy-param-overlap in htx_replace_blk_value

Project: https://github.com/haproxy/haproxy.git Detailed Report: https://oss-fuzz.com/testcase?key=5133738328784896 Project: haproxy Fuzzing Engine: honggfuzz Fuzz Target: fuzzh1htx Job Type: honggfuzzasanhaproxy Platform Id: linux Crash Type: Memcpy-param-overlap Crash Address:...

matio:matio_fuzzer: Heap-buffer-overflow in H5A__read

Project: git://git.code.sf.net/p/matio/matio https://github.com/tbeu/matio.git Detailed Report: https://oss-fuzz.com/testcase?key=6454365811703808 Project: matio Fuzzing Engine: afl Fuzz Target: matiofuzzer Job Type: aflasanmatio Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash...

javaparser:parseFuzzer: Security exception in com.github.javaparser.ast.expr.FieldAccessExpr.accept

Project: https://github.com/javaparser/javaparser.git Detailed Report: https://oss-fuzz.com/testcase?key=5329277116809216 Project: javaparser Fuzzing Engine: libFuzzer Fuzz Target: parseFuzzer Job Type: libfuzzerasanjavaparser Platform Id: linux Crash Type: Security exception Crash Address: Crash...

ogre:ogre_deep_fuzz: Heap-double-free in Ogre::Serializer::~Serializer

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4824799116591104 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Heap-double-free Crash Address: 0x79ef5c964410 Crash State:...

ogre:ogre_deep_fuzz: Stack-buffer-overflow in Ogre::MeshSerializerImpl::calcPosesSize

Project: https://github.com/OGRECave/ogre.git Detailed Report: https://oss-fuzz.com/testcase?key=4777988268032000 Project: ogre Fuzzing Engine: afl Fuzz Target: ogredeepfuzz Job Type: aflasanogre Platform Id: linux Crash Type: Stack-buffer-overflow READ 8 Crash Address: 0x75121f264e18 Crash State...

📄 dcontrol 1.0.9 Local File Inclusion

dcontrol version 1.0.9 suffers from an unauthenticated local file inclusion vulnerability via a path traversal. Exploit Title: dcontrol v1.0.9 - Unauthenticated Local File Inclusion LFI Date: 2026-04-18 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/dhjz/dcontrol Software Link...

PT-2026-46941

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A use-after-free flaw exists in the SyncChangeCounter function. A client that establishes multiple SyncCounters can trigger this condition by...

PT-2026-33851

Name of the Vulnerable Software and Affected Versions glibc versions 2.7 through 2.43 Description Calling the scanf family of functions using a %mc malloc'd character match with a format width specifier that has an explicit width greater than 1024 can lead to a one byte heap buffer overflow...

PT-2026-46943

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A use-after-free flaw exists in the CreateSaverWindow function. A client can trigger a use-after-free read by changing window attributes and...

PT-2026-33836

Name of the Vulnerable Software and Affected Versions OVN affected versions not specified Description A flaw in OVN Open Virtual Network allows a remote attacker to cause the ovn-controller to perform an out-of-bounds read by sending crafted DHCPv6 Dynamic Host Configuration Protocol for IPv6...

PT-2026-46940

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A use-after-free flaw exists in the FreeCounter function. This occurs when a client establishes multiple SyncCounters and awaits their triggers...

PT-2026-33803

Name of the Vulnerable Software and Affected Versions Magento Long Term Support LTS versions prior to 20.17.0 Description The product custom option file upload feature uses an incomplete blocklist forbidden extensions = php,exe to prevent dangerous file uploads. This restriction can be bypassed b...

PT-2026-46938

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A stack-based buffer overflow exists in the X.Org X server and Xwayland. The issue occurs because the CheckKeyTypes function fails to verify or...

PT-2026-33777

Name of the Vulnerable Software and Affected Versions Glances versions prior to 4.5.4 Description A Server-Side Request Forgery SSRF issue exists in the Glances IP plugin due to improper validation of the public api configuration parameter. The value of public api is passed directly to the urlope...

PT-2026-46937

Name of the Vulnerable Software and Affected Versions X.Org X server affected versions not specified Xwayland affected versions not specified Description A use-after-free flaw exists in the miSyncDestroyFence function. This occurs when a client sets up multiple fence triggers, allowing a function...