413613 matches found
Bytecode Alliance wasmtime resource management error vulnerability
Bytecode Alliance versions prior to 36.0.16, 37.0.0 through 48.0.3, and 49.0.0 through 49.0.1 contain a resource management error vulnerability. This vulnerability stems from waSTM time-wasi-http failing to enforce a write check limit on the WASIp2 outbound HTTP body, thereby allowing excessively...
sahlberg libsmb2 numeric error vulnerability
Versions of sahlberg libsmb2 prior to 6.3 contain a numeric error vulnerability. This vulnerability stems from an integer overflow in the DCE/RPC NDR decoder within lib/dcerpc.c. It may allow malicious SMB servers or intermediates on unsigned connections to send specially crafted NetrShareEnum...
CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1792548288)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1792548288 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-31 and 6.9.13-56, a...
RHEL 10 : php (RHSA-2026:87070)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:87070 advisory. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. Security Fixes: php: php: Denial of Service via...
PT-2026-135022
Impact A memory-related vulnerability has been discovered in an upstream library used for Image Optimization can lead to possible remote code execution RCE when Next.js runs on glibc-based Linux. Workaround Ensure the version of sharp used by Next.js is greater than or equal to 0.35.5. Fresh...
Oracle Linux 8 : php:7.4 (ELSA-2026-87080)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-87080 advisory. - Avoid state corruption via bailout CVE-2026-109618, CVE-2026-109619 - Fix IPv6 ACL bypass in FastCGI listen.allowedclients due to partial address...
Linux Distros Unpatched Vulnerability : CVE-2026-102485
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out-of-bounds read in the Motorola Oncore refclock driver in NTPsec ntpd before 1.2.6 allows an attacker who controls the GPS receiver's serial data to crash nt...
RockyLinux 9 : kernel (RLSA-2026:86033)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:86033 advisory. kernel: openvswitch: defer tunnel netdevput to RCU release CVE-2026-31678 kernel: xfrm: espintcp: do not reuse an in-progress partial send CVE-2026-5293...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
PHP CVE-2026-109618/109619 资产排查工具（源码 GUI 单文件exe）...
SUSE CVE-2026-19630
In a BIND resolver, inbound DNS protocol messages with a particular structure will result in additional processing, with no limit imposed by BIND. A DNS message with a maliciously large number of such structures will cause BIND to consume disproportionate amounts of CPU time and memory during...
SUSE CVE-2026-94300
Replaying GSS-TSIG signed UDP messages can result in memory corruption in "named". An attacker who can capture a previously signed UDP message can replay it while the negotiated TSIG key is still valid. By also sending crafted queries to a zone the attacker controls, the attacker may potentially...
SUSE CVE-2026-98690
In the Linux kernel, the following vulnerability has been resolved: thunderbolt: Fix domain reference leak when DPRX read is canceled tbtunnelonedp takes a domain reference which is only dropped once tbdptunnelactive has run on the work queue. If that work is cancelled that reference is leaked...
SUSE CVE-2026-112020
LodePNG through 20261006 contains a heap out-of-bounds read vulnerability in lodepng::getFilterTypesInterlaced in lodepngutil.cpp that lacks bounds checks on decompressed IDAT data. Attackers can supply a crafted interlaced PNG declaring a raster larger than its IDAT stream to disclose adjacent...
SUSE CVE-2026-113868
When authenticating to a POP3 or SMTP server using NTLM, Thunderbird did not check whether the server's challenge was valid base64. A malicious server could send a challenge that caused Thunderbird to include uninitialized heap memory in its NTLM response, disclosing that memory to the server. A...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Checker !PHPhttps://img.shields.io/badge/PHP-5.4...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Checker !PHPhttps://img.shields.io/badge/PHP-5.4...
Exploit for Improperly Controlled Sequential Memory Allocation in Php
php2shell Checker !PHPhttps://img.shields.io/badge/PHP-5.4...
CLSA-2026-1787293393 Fix CVE(s): CVE-2026-31405, CVE-2026-53043, CVE-2026-64564
CVE-2026-64564 - sctp: don't free the ASCONF's own transport in DEL-IP processing CVE-2026-64564 CVE-2026-53043 - ocfs2/dlm: validate qrnumregions in dlmmatchregions CVE-2026-53043 CVE-2026-31405 - media: dvb-net: fix OOB access in ULE extension header tables CVE-2026-31405 Bump ABI 4.15.0-263...