CVE-2026-110831: Missing Release of File Descriptor or Handle after Effective Lifetime

FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in driveprocessirpcreate, which registers an opened local file in the drive dictionary before applying the allocation size and does not remove it when that operation fails. A malicious RDP server connected to a client with...

Linux Distros Unpatched Vulnerability : CVE-2026-109947

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via...

PT-2026-114145

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.13.0 through 3.31.0 Description A resource retention flaw exists in the drive process irp create function. The issue occurs when an opened local file is registered in the drive dictionary before the allocation size is applie...

CVE-2026-63169

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is...

CVE-2026-63169

Omnispace Agora Project versions prior to 26.10.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The flaw exists in the messenger's HTMLPurifier SafeIframe branch, which fails to properly neutralize input, allowing authenticated users to post messages containing attacker-con...

CVE-2026-63169 Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is...

CVE-2026-63169 Omnispace Agora Project < 26.10.0 Stored XSS via Messenger Iframe

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is...

DEBIAN-CVE-2026-109947

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-109947

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-109947

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-109947

FreeRDP versions 3.20.1 before 3.32.0 are vulnerable to an uncontrolled resource allocation vulnerability within the drive_process_irp_read function. A malicious RDP server can exploit this by sending an IRP_MJ_READ request with a length of 0xffffffff , which leads to the exhaustion of client mem...

CVE-2026-109947 FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-109947 FreeRDP 3.20.1 before 3.32.0 Unbounded Allocation via drive_process_irp_read

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-109947: Allocation of Resources Without Limits or Throttling

FreeRDP from 3.20.1 before 3.32.0 contains an uncontrolled resource allocation vulnerability that allows malicious RDP servers to exhaust client memory via oversized drive redirection read requests. Attackers can send IRPMJREAD with Length 0xffffffff, causing roughly 4 GiB of zeroed allocation on...

CVE-2026-63169: Improper Neutralization of Input During Web Page Generation

Omnispace Agora Project before 26.10.0 contains a stored cross-site scripting vulnerability that allows authenticated users to post messages containing attacker-controlled iframes through the messenger's HTMLPurifier SafeIframe branch. Attackers can craft a message with a malicious iframe that is...

PT-2026-111380

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC Drive Controller CPU 1504D TF affected versions not specified Description Devices do not properly restrict executable content within imported trace files. An attacker could social engineer an authorized user with the "Read...

PT-2026-111542

Name of the Vulnerable Software and Affected Versions FreeRDP versions 3.20.1 through 3.31.0 Description An uncontrolled resource allocation issue exists where malicious RDP servers can exhaust client memory through oversized drive redirection read requests. This occurs when an attacker sends an...

PT-2026-113377

Name of the Vulnerable Software and Affected Versions Omnispace Agora Project versions prior to 26.10.0 Description A stored cross-site scripting issue exists that allows authenticated users to post messages containing attacker-controlled iframes via the messenger's HTMLPurifier SafeIframe branch...

colabcat

Colabcat Ejecuta Hashcat en Google Colab con capacidad de restauración de sesión mediante Google Drive. Uso Ve al enlace de abajo para abrir una copia del archivo colabcat.ipynb en Google Colab: https://colab.research.google.com/github/someshkar/colabcat/blob/master/colabcat.ipynb Haz clic en...

SUSE CVE-2026-98318

In the Linux kernel, the following vulnerability has been resolved: smb: client: validate absolute native symlink targets before NT fixups With symlinkroot unset, an absolute target is copied without conversion to an NT drive path. Later code still assumes an NT prefix is present when modifying t...