CVE-2026-65981

Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.15.0, a server using --mobility authenticates a resumed REFRESH request with the resuming user's credentials but does not verify that identity against the original allocation owner, allowing an authenticated attacker...

CVE-2026-11885 Power System update in Buffer Copy

IBM PowerVM Hypervisor FW1110.00 through FW1110.20, FW1060.00 through FW1060.71, and FW950.00 through FW950.H1 A carefully crafted OS hypervisor call can cause the PowerVM hypervisor to crash or compromise OS memory integrity...

Important: Red Hat Security Advisory: openssh security update

An update for openssh is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

ROS-20260729-73-0015

The vulnerability in libheif relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-53445

Wekan is open source kanban built with Meteor. Prior to 9.32, the Wekan copyBoard Meteor DDP method in server/publications/boards.js copies a board by caller-supplied board ID without checking this.userId, membership, or admin access. Any authenticated user can copy a private board they are not a...

DEBIAN-CVE-2026-59996

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations...

CVE-2026-59996

OpenSSH SCP flaw: OpenSSH versions before 10.4 allow a file to be placed in the parent directory of the target when copying between two remote destinations. Root cause is described in the OpenSSH release notes; remediation is to upgrade to OpenSSH 10.4p1 or later (fixed in 10.4p1). No exploit det...

The vulnerability of the PX4 Autopilot system, which involves copying buffers without checking the size of the input data, allows a intruder to trigger a service failure.

The vulnerability of the missionblock.cpp component in the PX4 Autopilot system management software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a hacker to cause a service failure...

CVE-2026-45403

Summary of CVE-2026-45403 : AnythingLLM’s agent filesystem copy tool (prior to v1.13.0) validates only the top-level source/destination. The recursive copy helper traverses child entries with fs.stat() and copies via fs.copyFile() without validating each child or rejecting symlinks. A symlink ins...

The vulnerability of the frmL7ProtForm() function in the Tenda F456 router’s microprogramming software allows a hacker to execute arbitrary code.

The vulnerability of the frmL7ProtForm function in the Tenda F456 router’s microprogramming software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by...

Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37044)

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute code. We have already fixed the vulnerability in the followin...

The vulnerability of the setup_clusters() function in the mm/swapfile.c component of the Linux kernel allows a hacker to cause a service failure.

The vulnerability of the setupclusters function in the mm/swapfile.c component of the Linux kernel involves copying buffers without checking the input data. Exploiting this vulnerability allows an attacker to cause a service failure...

The vulnerability of the formAdvFirewall() function in D-Link DIR600L router microprogramming software allows a hacker to induce a service failure.

The vulnerability of the formAdvFirewall function in the microprogramming software for D-Link DIR600L routers is related to the copying of buffers without checking the size of the input data when processing the curTime parameter. Exploiting this vulnerability could allow a malicious actor to caus...

EUVD-2025-33402

A Buffer Copy without Checking Size of Input vulnerability in the Session Initialization Protocol SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When memory utilization is high, and specific...

EUVD-2020-29577

Malware in sbrugna...

EUVD-2023-38217

Malicious code in bioql PyPI...

The vulnerability in the driver/misc/mei/vsc-tp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability in the drivers/misc/mei/vsc-tp.c component of the Linux operating system is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the qcom/lpass.h component in the Linux operating system’s kernel is related to the copying of buffers without checking the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the formexeCommand()/goform/exeCommand function in the Tenda CH22 router software allows a attacker to cause a service failure.

The vulnerability of the formexeCommand/goform/exeCommand function in the Tenda CH22 router’s microprogramming system lies in the copying of buffers without checking the size of the input data when processing the cmdinput parameter. Exploiting this vulnerability could allow a remote attacker to...

The vulnerability of the Framework component of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the Framework component in the Android operating system relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to increase their privileges...