Important: Red Hat Security Advisory: Red Hat build of MicroShift 4.21.36 security update

Red Hat build of MicroShift release 4.21.36 is now available with updates to packages and images that include a security update. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

EUVD-2026-93659

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2026-82162

Versions prior to 5.2.3.35 of Dell Command | Configure (DCC) are vulnerable to an Improper Handling of Mixed Encoding vulnerability (CWE-175). An unauthenticated attacker with remote access could potentially exploit this flaw to achieve Elevation of Privileges . Remediation information can be fou...

CVE-2026-82162

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal

A flaw was found in the encoding/asn1 package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One ASN.1 structure, leading to excessive recursion during the Unmarshal operation. This could result in stack exhaustion and a Denial of Service DoS conditio...

encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue

A flaw was found in the encoding/xml package of Go. The DecodeElement function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service DoS for t...

netty: Netty: High integrity impact due to improper DNS domain name constraint enforcement

A flaw was found in Netty. Netty's DNS Domain Name System codec does not properly enforce domain name constraints as defined in RFC 1035 during both encoding and decoding processes. This vulnerability allows a remote attacker to exploit the decoder using malicious DNS responses or exploit the...

KeyPatchX

KeyPatch Enhanced — Plugin d'assemblage sensible aux symboles pour IDA Pro Basé sur Keypatch par Nguyen Anh Quynh & Thanh Nguyen, branche améliorée modifiée par Euarno. Amélioration principale : utiliser directement les noms de symboles IDA dans l'assemblage x86/x64 , le plugin résout...

CVE-2021-42013

CVE-2021-42013 — PoC: تجاوز المسار + تنفيذ أوامر عن بُعد عبر modcgi تجاوز التصحيح للاستخدام فقط في بيئات خاضعة للرقابة ومملوكة. لا تستخدم ضد أنظمة بدون إذن. الوصف تم تطوير PoC لإظهار CVE-2021-42013 ، الموجود في Apache HTTP Server 2.4.50. هذا CVE هو تجاوز للتصحيح الذي أصدرته Apache لـ...

CVE-2026-28318-check

SolarWinds Serv-U Unauthenticated DoS: Safe Detection Script A safe, non-destructive detector for CVE-2026-28318 , an unauthenticated denial-of-service in SolarWinds Serv-U= 15.5.4.108. A single POST that carries Content-Encoding: deflate and a body feeds that body to an in-memory deflate...

Weblogic_Unauthorized-bypass-RCE

CVE-2020–14882 تجاوز التصريح غير المصرح به وتنفيذ الأوامر عن بُعد في WebLogic CVE-2020-14882 سكريبت اختبار تجاوز التصريح غير المصرح به وتنفيذ الأوامر عن بُعد في Oracle Weblogic يعمل على Python3 الطلبات POST /console/images/%252E%252E%252Fconsole.portal HTTP/1.1 Host: User-Agent: Mozilla/5.0 Windo...

CLEANSTART-2026-LH05062 HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va...

Security vulnerability affects the sonarqube package. HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported Content-Encoding header value in the response message...

CLEANSTART-2026-ON00136 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

Security vulnerability affects the sonarqube package. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON...

CVE-2026-106122: Encoding Error

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.36.0, ValueReader.readShortstr decodes malformed UTF-8 bytes into replacement characters that can re-encode beyond the AMQP shortstr limit enforced by...

A flaw was found in the GLib Base64 encoding routine when processing very large input data (CVE-2026-1484)

A flaw was found in the GLib Base64 encoding routine when processing very large input data. Due to incorrect use of integer types during length calculation, the library may miscalculate buffer boundaries. This can cause memory writes outside the allocated buffer. Applications that process untrust...

PT-2026-107109

Dell Command | Configure DCC, versions prior to 5.2.3.35, contain an Improper Handling of Mixed Encoding vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of Privileges...

PT-2026-107233

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.9 through 3.4.x Description Improper handling of Unicode encoding in the SmtpPickupDirAppender occurs when the mail file writer encounters content it cannot encode, such as an unpaired UTF-16 surrogate. This causes...

PT-2026-107236

Name of the Vulnerable Software and Affected Versions Apache log4net versions 1.2.12 through 3.4.x Description Improper encoding or escaping of output occurs in the RemoteSyslogAppender. Characters outside visible ASCII and space are removed from the record instead of being escaped, causing...