CVE-2026-98803

A flaw was found in the Linux kernel's stmmac ethernet driver. When receiving network frames larger than the primary buffer size, the Direct Memory Access DMA engine attempts to write excess data into a secondary receive buffer that is neither allocated nor mapped for regular frames. An attacker ...

CVE-2026-98855

A flaw was found in the Linux kernel's Device Tree overlay subsystem. When an error occurs while adding a property to a device tree overlay changeset, the allocated property is freed during error cleanup but remains tracked, leading to a second release double-free when the overlay node is torn...

php: OOM bailout during request parsing leads to memory corruption and RCE

A flaw was found in PHP's memory limit handling during request parsing. PHP records certain state as ready for use before all required memory allocations complete. If an allocation fails due to memory exhaustion, the incomplete state is not rolled back. Subsequent cleanup operations treat the...

Important: Red Hat Security Advisory: php security update

An update for php is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...

CVE-2026-98853

A flaw was found in the Linux kernel's Generic Segmentation Offload GSO implementation. When processing deeply nested IP-in-IP packets, recursive segmentation is not properly restricted, which can exhaust kernel stack memory. A remote attacker could exploit this vulnerability by transmitting...

CVE-2026-115478

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

Improper Validation of Array Index

Overview rply is a Python parser generator, that also works with RPython. Affected versions of this package are vulnerable to Improper Validation of Array Index via improper array index validation in plyreadheaderproperty, which accepts list as a list property's length or value type. An attacker...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

POC-CVE-...

Exploit for OS Command Injection in Php

PHP CVE PoC Collection Colecao de Provas de Conceito PoC ed...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell CVE-2026-109618 CVE-2026-109619 php2shell CVE-202...

Exploit for Improperly Controlled Sequential Memory Allocation in Php

php2shell — CVE-2026-109618 / CVE-2026-109619 Pre-auth Remote...

CLSA-2026-1792765036 librabbitmq: Fix of CVE-2026-44236

CVE-2026-44236: amqptuneconnection accepted a framemax below the AMQP minimum 4096, allowing undersized frame buffers and memory corruption...

CVE-2026-115478 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

CVE-2026-115478

The obsidian-tc Model Context Protocol server (versions 1.0.1 through 1.31.4 ) contains a memory-lifecycle flaw where the create_entity, link_entities, rename_entity, unlink_entities, and delete_entity tools can overwrite unowned vault notes. This occurs because the software regenerates notes fro...

CVE-2026-115478

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, "createentity", "linkentities", "renameentity", "unlinkentities" and "deleteentity" regenerate memory notes from SQLite at the computed "memory//.md" path without reliably preserving...

EUVD-2026-109083

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

CVE-2026-115478 obsidian-tc: Memory-lifecycle tools overwrite unowned notes or partially commit lifecycle changes

obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. From 1.0.1 until 1.31.4, createentity, linkentities, renameentity, unlinkentities and deleteentity regenerate memory notes from SQLite at the computed memory//.md path without reliably preserving note...

kernel: netfs: Fix early put of sink folio in netfs_read_gaps()

A flaw was found in the Linux kernel's network file system netfs. This use-after-free vulnerability occurs when the netfsreadgaps function prematurely releases a memory page during network read operations. A remote attacker could exploit this by sending specially crafted network traffic, leading ...

CLSA-2026-1792762308 kernel: Fix of 128 CVEs

net: skbuff: propagate shared-frag marker in skbzerocopy - net: bridge: stop fast-leave after deleting a port group CVE-2026-74480 - net: ipv6: clear suppressed fib6 rule result CVE-2026-74581 - net: skbuff: propagate shared-frag marker through frag-transfer helpers CVE-2026-43503 - ALSA: virtio:...

CVE-2026-53920

odhcpd is the DHCPv6, DHCPv4, and router-advertisement server used by OpenWrt. From version 17.01.0 to before version 25.12.3, odhcpd's DHCPv6 IA parser accepts an IANA or IAPD option whose body is shorter than struct dhcpv6iahdr, casts the option header to that full structure, and reads ia-iaid...