16932 matches found
CVE-2026-44756
A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...
kernel-c-to-rust-spike
Kernel C-to-Rust hardening spike: UVC descriptor parser Can a security-critical Linux kernel C parser be hardened by rewriting it in Rust, with the rewrite shown equivalent to the original and then formally verified? This spike runs the full loop on one target: the UVC video descriptor parser...
EUVD-2026-72572
A memory safety vulnerability exists in the Extended Passport Protocol EPP processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program...
PT-2026-86947
Detailed: • OpenAI claims an internal model solved the Navier-Stokes Millennium Prize problem after 10,000 agents ran for 88 hours, triggering a dispute with researchers over priority. • Mistral raised €3 billion at a valuation above €21 billion, the largest European tech equity round, to expand...
EUVD-2026-72176
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2026-80802
In the Linux kernel, the following vulnerability has been resolved: n...
CVE-2026-86227
valkey-io valkey (up to 9.0.5/9.1.1) contains an out-of-bounds read in the kvstoreGetHashtable function of src/kvstore.c, triggered by manipulation of the didx argument. Exploitation requires cluster mode plus an attacker-controlled dump.rdb at startup (via data-dir write access, replication feed...
CVE-2026-86227 valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds
A weakness has been identified in valkey-io valkey up to 9.0.5/9.1.1. This affects the function kvstoreGetHashtable of the file src/kvstore.c. This manipulation of the argument didx causes out-of-bounds read. It is possible to initiate the attack remotely. The attack is considered to have high...
CVE-2015-8710
Reproducer Kudos to Mike Dalessio, Francois Chagnon, Florian Weingarten and Jun Kokatsu. See BZ 746048 Building on Linux root@kitploit: $ cmake ../CVE-2015-8710/ -G "Unix Makefiles" -DLIBXML2LIBRARIES=/path/to/your/library/libxml2.so.2...
mlkem-native
mlkem-native mlkem-native is a secure, fast, and portable C901 implementation of ML-KEM2. It is a fork of the ML-KEM reference implementation3. All C code in mlkem/src/ and mlkem/src/fips202/ is proved memory-safe no memory overflow and type-safe no integer overflow using CBMC4. All AArch64 and...
Fedora 46 : rust-lru / rust-lru0.16 (2026-a4ab790e17)
The remote Fedora 46 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-a4ab790e17 advisory. Update lru crate to version 0.18.4 and add a compat package for version 0.16. This fixes an obscure potential use-after-free issue: Rebuild tracker: Tenable...
GHSA-3JCW-33FG-2HGV vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-H34P-XGVR-MFG3 vulnerabilities
Vulnerabilities for packages: firefox...
GHSA-6W89-9JRV-4J59 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-39113
CVE-2026-39113: Heap Buffer Overflow in SQLite's Optional SQLAR Extension Executive Summary CVE-2026-39113 is a heap buffer overflow in SQLite's optional SQLAR extension. In an application that has loaded the extension, an attacker who can invoke sqlaruncompress with a controlled compressed blob...
GHSA-X5WW-48C3-RP9J vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-6J37-MH6C-P74W vulnerabilities
Vulnerabilities for packages: chromium...
GHSA-7JV8-R36R-863G vulnerabilities
Vulnerabilities for packages: chromium...