146 matches found
CVE-2021-30357_CheckPoint_SNX_VPN_PoC
CVE-2021-30357CheckPointSNXVPNPoC Proof-of-Concept for privileged file read through CheckPoint SNX VPN Linux Client. Affected Version CheckPointVPNSNXLinux800007075.sh MD5 Checksum: 4372e9936e2dfb1d1ebcef3ed4dd7787 Exploit To exploit just load any file as SNX config using the -f paremeter. If the...
CVE-2026-96261
IBM Power Systems Firmware versions FW1060.00 through FW1060.81 are vulnerable to a stack-based buffer overflow (CWE-121) during host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can provide specially crafted configuration data, caus...
PT-2026-110955
🚨 CVE-2026-96261 IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boo...
CVE-2026-96266: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the FSP can write specially crafted configuration data to cause memory corruption in the host firmware boot stage...
Security Bulletin: This Power System update is being released to address CVE-2026-96261
Summary Power Systems Firmware is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causing the host firmware boot stack to crash with possible memory...
CVE-2026-97906
A flaw was found in the Linux kernel. A local attacker with the ability to supply a crafted initial RAM disk initrd can trigger an integer overflow during boot configuration parsing. This flaw allows the attacker to bypass memory bounds checks, causing the system to read unmapped memory and crash...
SUSE CVE-2026-52857
Wings is the server control plane for Pterodactyl, a free, open-source game server management panel. Prior to 1.13.0, unbounded json, yaml, and xml configuration-file parsers in parser.go can process an oversized non-file parser configuration file and exhaust Wings process memory. This issue is...
CVE-2026-84202
ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users...
Amazon Linux 2023 : alsa-lib, alsa-lib-devel, alsa-topology (ALAS2023-2026-2082)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-2082 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf.c that allows attackers to corrupt memory by supplying maliciously crafte...
Amazon Linux 2 : alsa-lib, --advisory ALAS2-2026-3874 (ALAS-2026-3874)
The version of alsa-lib installed on the remote host is prior to 1.1.4.1-2. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2026-3874 advisory. The Advanced Linux Sound Architecture ALSA library before 1.2.16.1 contains a double-free vulnerability in parsedef in src/conf....
CVE-2026-18871
IBM PowerVM Hypervisor FW1120.00, FW1110.00 through FW1110.30, and FW1060.00 through FW1060.80 is affected by a vulnerability in host firmware configuration parsing. An attacker with authenticated service-level access to the service processor can write specially crafted configuration data, causin...
CVE-2026-18871
IBM PowerVM Hypervisor firmware (FW1060.00–FW1060.80, FW1110.00–FW1110.30, FW1120.00) is affected by CWE-121 stack-based buffer overflow in host firmware configuration parsing. An authenticated service-processor attacker can crash the boot stack with memory corruption. No workarounds exist; affec...
CVE-2026-17093
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...
EUVD-2026-62633
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...
CVE-2026-17093 Power System Buffer Overflow
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...
PT-2026-78567
Name of the Vulnerable Software and Affected Versions IBM Power Systems Firmware FW1120.00 IBM Power Systems Firmware versions FW1110.00 through FW1110.30 IBM Power Systems Firmware versions FW1060.00 through FW1060.80 IBM Power Systems Firmware versions FW950.00 through FW950.H2 IBM Power System...
openSUSE 16 Security Update : htop (openSUSE-SU-2026:21585-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2026:21585-1 advisory. Changes in htop: - Update to version 3.5.3: Improve the htoprc settings parser to avoid segfaults on tampered configuration files sanitised sort keys,...
CVE-2026-17093: Stack-based Buffer Overflow
IBM Power Systems Firmware FW1120.00, FW1110.00 through FW1110.30, FW1060.00 through FW1060.80, FW950.00 through FW950.H2, OP940.00 through OP940.a1 Power9, and OP940.00 - OP940.81 Power HMC is affected by a vulnerability in host firmware configuration parsing. An attacker with service-level acce...
CVE-2024-58375
OpenTofu versions 1.8.0 through 1.8.2 do not properly restrict sensitive variables and locals when users have opted into static evaluation of module sources, versions, and backend configurations. As a result, values marked as sensitive may be exposed through these configuration elements instead o...
