88552 matches found
ROS-20260727-73-0027
A vulnerability in the Apache HTTP Server's OCSP protocol implementation is related to out-of-bounds memory access. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...
Linux Distros Unpatched Vulnerability : CVE-2026-64254
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pciiounmap with offset when PEERSPAD and CONFIG share BAR When BARPEERSPAD a...
SUSE CVE-2026-10822
If BIND encounters a particular invalid data structure in a DNS record, it will accept the invalid data, and may subsequently abort and exit. BIND will first need to store a DNS record for a key KEY, DNSKEY, etc.. That key must specify a PRIVATEDNS algorithm 253, and in the algorithm identifier,...
SUSE CVE-2026-55991
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion if compiled with assertions on and terminate the entire Unbound process using a single DNS-over-QUIC DoQ connection and one normal DNS query. This is caused by an erroneous...
phpstan v2.2.6
PHPStan - PHP Static Analysis Tool PHPStan focuses on finding errors in your code without actually running it. It catches whole classes of bugs even before you write tests for the code. It moves PHP closer to compiled languages in the sense that the correctness of each line of the code can be...
Web-Payloads-Arsenal
🔥 SQL Injection Payloads Arsenal My daily collection of SQL...
CVE-2026-57989
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-49058
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-57989
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-49057
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
php:php-fuzz-parser: Use-of-uninitialized-value in zend_get_compiled_lineno
Detailed Report: https://oss-fuzz.com/testcase?key=5443241508667392 Project: php Fuzzing Engine: libFuzzer Fuzz Target: php-fuzz-parser Job Type: libfuzzermsanphp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: zendgetcompiledlineno getfilenamelineno...
CVE-2026-66033
A flaw was found in libssh2. A pre-authentication integer underflow vulnerability exists in the ssh2ciphercrypt function when negotiating AES-GCM ciphers during the handshake. A malicious SSH server can exploit this to trigger an out-of-bounds read and a memory copy operation with an extremely...
RUSTSEC-2026-0219 Remote Denial of Service via malformed NIP-04 IV
The nostr crate did not validate the length of the initialization vector decoded from the ?iv= portion of a NIP-04 encrypted message. The decoded IV was converted from a byte slice to the 16-byte AES-CBC IV type using a conversion that asserts the slice length. As a result, an IV whose decoded...
Drupal PostgreSQL SQLi (CVE-2026-9082)
CVE-2026-9082 SA-CORE-2026-004: PostgreSQL-only blind SQL injection via JSON:API filter value array keys or POST /user/login name keys. translateCondition concatenates the key into a PDO placeholder; 0||1/CASE WHEN predicate THEN 0 ELSE 1 END turns true predicates into HTTP 500 divisionbyzero and...
Apache Superset CVE-2026-23980 chart/data SQLi
Exploits CVE-2026-23980: authenticated or PUBLICROLE error-based SQL injection via sqlExpression/where on POST /api/v1/chart/data. Supports direct extraction, CAST error leakage, and PostgreSQL querytoxml bypass. Affected: Superset 6.0.0. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-2398...
6lowpan: fix NHC entry use-after-free on error path
...
posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path
...
ALSA: gus: check snd_ctl_new1() return value
...
