CVE-2025-65320

CVE-2025-65320 CVE-2025-65320：Abacre Restaurant Point of Sale POS 中的内存敏感信息明文存储漏洞。 所有版本（最高至 15.0.0.1656）的 Abacre Restaurant Point of Sale POS 均存在内存中敏感信息明文存储漏洞。在激活尝试期间，应用程序会将有效的、绑定设备的许可证密钥保留在进程内存中。攻击者可通过将进程附加到调试器并分析进程/内存转储来获取这些密钥，然后无需购买即可在同一台机器上激活软件。 下面，我们提供了动态分析和调试器输出的证据，表明这些密钥在激活尝试期间被分配并保留在进程内存中。...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

CVE-2026-106061

A flaw in GIMP 's X cursor (XMC) thumbnail loader allows for a heap buffer over-read . The issue occurs because the software uses 32-bit signed arithmetic to calculate the pixel buffer size (width * height) for thumbnails. An integer overflow (CWE-190) in this calculation can result in an undersi...

CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

CVE-2026-43805-PoC

CVE-2026-43805: IODMACommand 状态竞争分析与 PoC 这是通过 macOS 26.5/26.6 内核二进制 diff 找出 Apple IOKit 中 IODMACommand::PerformOperationImpl 缺失状态锁的分析。在存在漏洞的构建中，当 PerformOperation 使用就绪状态和内存描述符时，CompleteDMA 可以释放同一状态。26.6 补丁将两条路径已经共享的 fDextLock 也应用于 PerformOperationImpl。 验证状态 已验证二进制 diff、调用目标、公开 XNU...

EUVD-2026-94103

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

DEBIAN-CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

CVE-2026-80048

A flaw was found in sssd-kcm. A local user or process able to connect to the sssd-kcm UNIX socket can exploit this vulnerability. By sending a large request length header and then stalling the connection, an attacker can cause the system to preallocate significant memory. This leads to memory...

Linux Distros Unpatched Vulnerability : CVE-2026-106273

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in Video in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outsid...

Linux Distros Unpatched Vulnerability : CVE-2026-106223

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uninitialized resource in GPU in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to read memory outside the sandbox via a crafted...

Linux Distros Unpatched Vulnerability : CVE-2026-106300

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in CacheStorage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to read memory outside...

The vulnerability of the Microsoft Office software relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of the Microsoft Office suite is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2026-106061

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GIMP's X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width heig...

EUVD-2026-94356

In NTFS-3G before 2026.7.7, a heap buffer overflow exists in cat in ntfscat.c that allows an attacker to corrupt heap memory in the ntfscat binary by crafting a malicious NTFS image. The overflow is triggered by reading a file...

CVE-2026-42618

A single-byte heap buffer overflow exists in the ntfs-3g component (before version 2026.7.7 ) within the ntfs_decompress() function in compress.c. An attacker can exploit this by crafting a malicious NTFS image and triggering the overflow by reading the specially crafted file. The vulnerability a...

EUVD-2026-94353

In NTFS-3G before 2026.7.7, a out-of-bounds read exists in ntfsfixfilename in libntfs-3g/reparse.c that allows an attacker to read possibly confidential information in ntfs-3g process memory by crafting a malicious NTFS image. The out-of-bounds read is triggered by a readlink on a corrupted file...