Security update for strongswan

This update for strongswan fixes the following issues: CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. CVE-2026-78126: NULL-Pointer Dereference When Handling...

SUSE-SU-2026:4146-1 Security update for strongswan

This update for strongswan fixes the following issues: - CVE-2026-78123: Undefined Memory Access When Handling PKCS7 Containers bsc1276533. - CVE-2026-78124: Memory Leak When Processing Certificates in PKCS7 Containers bsc1276534. - CVE-2026-78126: NULL-Pointer Dereference When Handling...

httpd: Apache HTTP Server: Denial of Service in mod_proxy_ftp via attacker-controlled FTP server

A flaw was found in the modproxyftp module of the Apache HTTP Server. A remote attacker, by controlling a backend File Transfer Protocol FTP server, can trigger an infinite loop. This vulnerability, categorized as a Loop with Unreachable Exit Condition, leads to a Denial of Service DoS for the...

CVE-2026-80957

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: detect a cycle in the last-kset chain during replay cachereplay follows the on-media last-kset chain by nextcachesegid with no condresched. A forged chain that points back into a segment it has already visited makes th...

CVE-2026-89752

In the Linux kernel, the following vulnerability has been resolved: mm: memcg: stop reclaim when a limit update is superseded kernfs serializes file operations only per open file, so separate open files can update the same memory.high or memory.max file concurrently. Both handlers store the new...

Important: openexr

Issue Overview: OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. Versions prior to 3.2.10, 3.3.12 and 3.4.13 contain a heap out-of-bounds write in Imf40::SampleCountChannel::setint r, unsigned int newNumSamples. The...

CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

UBUNTU-CVE-2026-89744

In the Linux kernel, the following vulnerability has been resolved: device property: fix infinite loop in fwnodeforeachchildnode When iterate over children of a fwnode that has a secondary fwnode, fwnodegetnextchildnode can enter an infinite loop if the secondary fwnode has more than one child...

UBUNTU-CVE-2026-89578

In the Linux kernel, the following vulnerability has been resolved: dm-io: clone the source bio instead of copying its biovec For DMIOBIO requests, doregion built each destination bio by walking the source bio's biovec and re-adding the pages one at a time, tracking the remaining transfer in...

CVE-2026-89490

In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksize - 1 | offset; ctx-pos is lofft signed 64-bit, while sb-sblocksize i...

CVE-2025-55184_Testing

CVE-2025-55184Testing 用于测试 CVE-2025-55184 的 Python 脚本 CVE-2025-55184 – React 服务器组件 DoS 扫描器 一个安全、无害的验证脚本 ，用于检测 CVE-2025-55184 ，这是一个影响 React 服务器组件 RSC 的拒绝服务 DoS 漏洞。 本工具仅用于内部安全测试和受控评估。 它只能在你拥有或明确授权测试的系统上使用。 概述 CVE-2025-55184 - 拒绝服务 DoS 严重性：高 | CVSS 评分：7.5 CVE-2025-55184 影响 React 服务器组件使用的反序列化逻辑。 精心构造...

CVE-2025-46206

Existe una vulnerabilidad de denegación de servicio en MuPDF 1.25.6 y versiones anteriores. Cuando un atacante ejecuta el comando "mutool clean poc /dev/null", el programa cae en una recursión infinita entre las funciones stripoutlines y stripoutline en pdf-clean-file.c hasta que se agota la pila...

CVE-2024-44337

CVE-2024-44337 The package "github.com/gomarkdown/markdown" is a Go library for parsing Markdown text and rendering it as HTML. In pseudo-version 'v0.0.0-20240729232818-a2a9c4f' corresponding to commit 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' and earlier, there is a logic issue in the paragraph...

CVE-2026-78904-Digital-Dinar-Drain

CVE-2026-78904 — 数字迪拉姆盗取 CBDC 发行 API — 逻辑缺陷（无限铸造） 字段| 值 ---|--- 严重性| 9.8（严重） 攻击向量| 网络 受影响版本| 2.1.0 – 2.1.3 发现者| 𝕍𝕠𝕤𝕤🥷 描述 CBDC 发行 API 中的一个严重逻辑缺陷允许具有低级别访问权限的攻击者操纵铸造和赎回端点。这能够在未经授权的情况下创建或销毁 CBDC 单位。 影响 未经授权铸造 CBDC 单位 操纵赎回请求 无限铸造攻击向量 缓解措施 升级至 CBDC 发行 API 2.1.4 或更高版本 对铸造/赎回端点实施速率限制 对所有管理操作强制执行多因素授权 时间线...

CVE-2023-46442_POC

CVE-2023-46442POC 环境：Java 8 用于 CVE-2023-46442 的 POC，在 Java 8 环境下发现 Soot 4.4.1 之前的拒绝服务漏洞 在检索恶意构造的方法体时，一个非常小的类文件或方法可能导致 巨大的资源消耗并永远循环，直到达到 OutOfMemory（取决于 JVM 设置） src/main/java/POC.java - 示例易受攻击的程序 src/main/resources/Build$Builder.class - 示例类文件，可能导致 DoS/无限循环（攻击载荷）...

CVE-2025-50420

在 25.07.0 之前的 Poppler 版本中，其 pdfseparate 工具的 PDFDoc 处理逻辑存在一个漏洞：精心构造的 "/Annots" 字典自引用或相互引用，会导致 "PDFDoc::markAnnotations -- PDFDoc::markPageObjects -- PDFDoc::markObject -- PDFDoc::markDictionary" 中出现无限递归，因为循环检测使用的是字典指针地址，而每次 fetch 获取到的地址都不同。远程攻击者可以通过处理恶意 PDF 造成拒绝服务（应用程序挂起或崩溃）。 这里我构造了一个恶意...

CVE-2026-66730-Infinite-Loop-DoS-in-facil.io-MIME-Parser

Aviso de seguridad: DoS por bucle infinito en el analizador MIME de facil.io delimitador parcial ID de CVE asignado : CVE-2026-66730 Producto: facil.io Versiones afectadas: facil.io = 0.6.0 todas las 0.6.x, todas las 0.7.x, master; introducido junto con el analizador MIME en 0.6.0 Componente:...

cve-2026-23989-opencloud-lab

CVE-2026-23989 — OpenCloud / ownCloud Infinite Scale 公共链接作用域绕过 一个自包含、单命令的实验室环境，使用官方上游 Docker 镜像复现 CVE-2026-23989 并验证其已修复。本应仅授予对一个文件夹 访问权限的公共共享链接，可被滥用读取该文件夹作用域之外 的文件。 | ---|--- CVE| CVE-2026-23989 公告| GHSA-vf5j-r2hw-2hrw（“公共链接漏洞”） CVSS 3.1| 8.2 高危 — AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N 类别| 访问控制失效 —...

Linux Distros Unpatched Vulnerability : CVE-2026-89490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ocfs2: fix readdir position truncation on 32-bit kernels In ocfs2dirforeachblkel, the directory cookie position is rebuilt with ctx-pos = ctx-pos & sb-sblocksiz...