Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In the net subsystem, issues with drop bad gso csumstart and offset in virtionethdr have been addressed. Additionally, the checks for csumstart and csumoffset in virtionethdrtoskb for GSO packets have been improved. The function...

D-Link DNS-120 CGI Check RCE

The vulnerability of the cgicheckrsyncrw function in the script /cgi-bin/remotebackup.cgi of the D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and...

Linux x86 Kernel Heap Buffer Overflow DoS

The vulnerability of the initamdbd function in the arch/x86/kernel/cpu/amd.c module, which is part of the Linux operating system’s x86 kernel support, is related to insufficient checking of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation

ImpactThe implementation of SobolSampleOp is vulnerable to a denial of service via CHECK-failure assertion failure caused by assuming input0, input1, and input2 to be scalar.pythonimport tensorflow as tftf.rawops.SobolSampledim=tf.constant1,0, numresults=tf.constant1, skip=tf.constant1 PatchesWe...

PYSEC-2026-3358 Missing validation results in undefined behavior in `QuantizedConv2D`

Impact The implementation of tf.rawops.QuantizedConv2D does not fully validate the input arguments: python import tensorflow as tf input = tf.constant1, shape=1, 2, 3, 3, dtype=tf.quint8 filter = tf.constant1, shape=1, 2, 3, 3, dtype=tf.quint8 bad args mininput = tf.constant, shape=0,...

CVE-2026-39341

ChurchCRM is an open-source church management system. Prior to 7.1.0, the application is vulnerable to time-based SQL injection due to an improper input validation. Endpoint Reports/ConfirmReportEmail.php?familyId= is not correctly sanitising user input, specifically, the sanitised input is not...

CVE-2025-68143

Model Context Protocol Servers is a collection of reference implementations for the model context protocol MCP. In mcp-server-git versions prior to 2025.9.25, the gitinit tool accepted arbitrary filesystem paths and created Git repositories without validating the target location. Unlike other too...

CVE-2025-48623

In initpkvmhypvcpu of pkvm.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Linux fs/libfs.c Heap Buffer Overflow DoS

The vulnerability of the simpleoffsetDestroy function in the fs/libfs.c module of the Linux file system support module is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause a service failure...

F2FS Heap Buffer Overflow DoS

The vulnerability of the f2fsgetunusableblocks function in the fs/f2fs/f2fs.h module of the F2FS file system support in Linux’s operating system is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to compromise the integrity of protected information or...

Linux SATA/PATA Kernel Buffer Overflow DoS

The vulnerability of the patamaciodoresume function in the SATA/PATA driver of the Linux operating system is related to incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability in krb5

The vulnerability of the krb5chpwmessage function in the Kerberos authentication protocol is related to insufficient input validation. Exploiting this vulnerability can allow attackers to access confidential data and also cause service interruptions...

kernel: netfilter: complete validation of user input

A denial of service vulnerability exists in the Linux kernel such that @optlen validation is not called before the function xtalloctableinfo, an attacker could craft a payload that results in a crash resulting in loss of availability...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the bnreduceonceinplace function in the OpenSSL library is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GNU FriBidi Heap Buffer Overflow RCE

The vulnerability of the fribidiremovebidimarks function in the GNU FriBidi library exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Improper Input Validation

Overview railsmultisite is a gem for multi-db support for Rails applications. Affected versions of this package are vulnerable to Improper Input Validation. Secure/signed cookies share secrets between sites in a multi-site application. Impact This vulnerability impacts any Rails applications usin...

openstack-neutron: arbitrary dnsmasq reconfiguration via extra_dhcp_opts

An input-validation flaw was found in openstack-neutron, where an authenticated attacker could change the dnsmasq configuration. By crafting extradhcpopts values, the attacker could crash the dnsmasq, change parameters for tenants sharing the same interface, or otherwise alter that daemon’s...

NOCC 1.0 no_mail.php html_no_mail Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/16793/info NOCC Webmail is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to inject...

PHP Perl Extension Safe_mode Bypass Exploit

No description provided by source. ?php ---------------------------------------------------- ----PHP Perl Extension Safemode Bypass Exploit----- ---------------------------------------------------- -Author:--NetJackal--------------------------------- -Email:---nima501atyahoodotcom----------------...