Astra Linux – vulnerability in python-django

An issue was found in Django versions prior to 2.2.28, 3.2 prior to 3.2.13, and 4.0 prior to 4.0.4. The QuerySet.annotate, aggregate, and extra methods are vulnerable to SQL injection via column aliases, which can be achieved by using a specially crafted dictionary with dictionary expansion as th...

SUSE CVE-2026-110926

CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582...

UBUNTU-CVE-2026-110926

Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582...

EUVD-2026-101837

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths...

CVE-2026-110926

...

CVE-2026-110926

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths...

Linux Distros Unpatched Vulnerability : CVE-2026-108063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By...

PT-2026-114768

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths...

CVE-2026-110926: Observable Discrepancy

Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582...

CVE-2026-110926

Rejected reason: CVE-2026-110926 has been marked as a duplicate of CVE-2026-106582...

Exploit for CVE-2026-109506

CVE-2026-109506: Improper Authentication in Multiple TP-Link W...

CVE-2026-109506

Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An unauthenticated attacker on the same local network who can capture the network traffic associated with legitimate administrator login may be able to derive a...

EUVD-2026-101602

Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow. An unauthenticated attacker on the same local network who can capture the network traffic associated with legitimate administrator login may be able to derive a...

USN-8928-1: OpenSSH vulnerabilities

It was discovered that OpenSSH's sftp client incorrectly handled paths returned by the server during a recursive copy operation. A remote attacker controlling the server could possibly use this issue to write files to unintended locations. CVE-2026-106552 It was discovered that OpenSSH's sshd...

openssh: openssh: shared LZ77 compression dictionary leaks plaintext across channels

A flaw was found in OpenSSH. When compression is negotiated, channels on the same connection share one LZ77 dictionary. A peer who can write on one channel can recover plaintext from another channel by chosen-plaintext lengths...

CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

AZL-108060 CVE-2026-103658 affecting package aspell 0.60.8.1-1

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

CVE-2026-103658

A flaw was found in Aspell. An attacker could achieve arbitrary code execution or cause a Denial of Service DoS by convincing a user to process a specially crafted dictionary file. This issue occurs due to an integer calculation error during buffer capacity checks in the read-only dictionary...

CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...

CVE-2026-103658

GNU Aspell 0.60.8.2 first vulnerable version is not known contains a heap-based buffer overflow write CWE-122 in its read-only dictionary loader. String::reserve in common/string.hpp computes its capacity check with a signed int ints + 1, so a requested size of 0x7FFFFFFF wraps negative and the...