1806 matches found
ffuf v2.3.0
ffuf - Fuzz Faster U Fool A fast web fuzzer written in Go. Installation Example usage Content discovery Vhost discovery Parameter fuzzing POST data fuzzing Using external mutator Configuration files Help Interactive mode Installation Download a prebuilt binary from releases page, unpack and run! ...
CVE-2026-89496: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ocfs2: always run deallocs on copy-on-write completion Local fuzzing of 6.12.94 has found the following memory leak caused by doing 'copyfilerange' within the same filesystem: unreferenced object 0xffff88812192c980 size 32: comm...
Linux Distros Unpatched Vulnerability : CVE-2026-46352
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Starting in version 8.0.0 and prior to...
CVE-2026-53933
Maravel , a PHP dependency-injection framework, is vulnerable to side-channel information disclosure via dynamic route fuzzing in versions prior to 10.73.1 . When routes are compiled with dynamic placeholders (e.g., /api/v1/users/{id}), the raw placeholder key is mistakenly registered into the fl...
libaom:av1_enc_fuzzer: Heap-buffer-overflow in av1_calc_mb_wiener_var_row
Detailed Report: https://oss-fuzz.com/testcase?key=6316915665207296 Project: libaom Fuzzing Engine: honggfuzz Fuzz Target: av1encfuzzer Job Type: honggfuzzasanlibaom Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 2 Crash Address: 0x7802327e028a Crash State: av1calcmbwienervarrow...
clusterfuzz v2.39.2
ClusterFuzz ClusterFuzz is a scalable fuzzing infrastructure that finds security and stability issues in software. Google uses ClusterFuzz to fuzz all Google products and as the fuzzing backend for OSS-Fuzz. ClusterFuzz provides many features which help seamlessly integrate fuzzing into a softwar...
AFLplusplus v5.03c
American Fuzzy Lop plus plus AFL++ Release version: 5.03c GitHub version: 5.03c Repository: https://github.com/AFLplusplus/AFLplusplus AFL++ is maintained by: Marc "van Hauser" Heuse [email protected] Dominik Maier [email protected] Andrea Fioraldi [email protected] Heiko "hexcoder...
CVE-2026-21809
HCL BigFix Quantum Risk Analyzer contains a validation process that returns overly descriptive error messages when processing malformed input, enabling an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input. The CVSS 3.1 score is 3.9 (LOW...
CVE-2026-21809 HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-099009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-099009 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: control: Validate buflen before strnlen in sndctleleminitenumnames sndctleleminitenumnames...
CVE-2026-21809: Generation of Error Message Containing Sensitive Information
HCL BigFix Quantum Risk Analyzer has a certain validation process that provides overly descriptive error messages when it encounters malformed input which can allow an attacker to conduct more efficient reconnaissance and fine-tune automated fuzzing tools to produce valid input...
Linux Distros Unpatched Vulnerability : CVE-2026-74722
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: fix memory leak in btrfsdoencodedwrite Local fuzzing of 6.12.94 has found the following memory leak: Unreferenced object 0xffff888018050a80 size 64: comm...
ANT-2026-8QCK7K2C · gdal · heap-buffer-overflow
heap-buffer-overflow high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Sonnet 4.6 REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8QCK7K2C: This is a genuine heap-buffer-overflow...
Unity Linux 20.1050a Security Update: kernel (UTSA-2026-100766)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100766 advisory. In the Linux kernel, the following vulnerability has been resolved: net: qrtr: fix refcount saturation and potential UAF in qrtrportremove In qrtrportremove, the...
Unity Linux 20.1050e Security Update: kernel (UTSA-2026-100174)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-100174 advisory. In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2preallocrawnoderefs result in few other places Fuzzing hit another invalid...
SUSE CVE-2026-68402
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-data0 to look it up in an extension non-inheritance list. It does so aft...
CVE-2026-68402
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-data0 to look it up in an extension non-inheritance list. It does so aft...
CVE-2026-68402 wifi: cfg80211: bound element ID read when checking non-inheritance
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-data0 to look it up in an extension non-inheritance list. It does so aft...
Linux Distros Unpatched Vulnerability : CVE-2026-68402
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211iselementinherited reads the first data octet of the candidate element id = elem-dat...
