CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd Stack Overflow ⚠️ For educational and authorized testing only. Unauthorized use is illegal. 📖 Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrt’s odhcpd daemon – the default DHCPv6/DHCPv4/RA server. 🔍 How it works The vulnerability exists...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC 该漏洞允许具有网络访问权限的攻击者在无需事先认证的情况下，对 Erlang/OTP SSH 服务器执行任意代码。 描述 已在 Erlang/OTP SSH 服务器中发现一个严重漏洞，可能允许攻击者执行未经认证的远程代码执行（RCE）。通过利用 SSH 协议消息处理中的缺陷，恶意行为者可在没有有效凭据的情况下获得对受影响系统的未授权访问并执行任意命令。这可能导致目标主机被攻陷，使第三方能够未经授权访问和操纵敏感数据，或发起拒绝服务攻击。 受影响版本 root@kitploit: OTP-27.3.2 and...

CVE-2025-32433.py

CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...

CVE-2025-32433

Erlang/OTP SSH Remote Code Execution Vulnerability. The root cause is a flaw in the SSH protocol's message handling mechanism, allowing attackers to send connection protocol messages before authentication is complete. Notably, this vulnerability affects all Erlang/OTP versions running SSH server...

USN-8682-1: Bind vulnerabilities

Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. CVE-2026-3039 Shuhan Zhang discovered that Bind incorrectly handled self-pointed...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-5946]

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND, due to multiple flaws causing an Improper Input Validation CVE-2026-5946. ISC BIND is used as part of our speech utilities. This vulnerability has been addressed. Please read the details for remediation below...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Do not attempt to process FASTREQ or EVENT messages. Currently, VF/PF relay actions only use regular REQUEST messages. The PF should not attempt to handle FASTREQUEST or EVENT messages, as doing so would break the VFPF...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...

Linux Distros Unpatched Vulnerability : CVE-2026-72360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

CVE-2026-49279 WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket Handler. The MessageSQLite.php handler only strips autoEvalCodeOnHTML from $json'msg', but msgToResourceId reads from...

PT-2026-56064

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.65.3 Description An application using this framework that exposes a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads. This occurs even when tools are registered with use=Fals...

SUSE-SU-2026:2719-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial-of-service via integer overflow in remote message decompression bsc1268381. Changes for pacemaker: - Update to version 2.1.10+20260618.4bca25e3c1: - libcrmcommon: Add additional checks to pcmkremotemessagexml...

Wazuh 4.14.2 Security Scanner

This Python script is a non-exploitative security scanner designed to test basic responsiveness and message handling behavior of a Wazuh cluster communication endpoint...

CVE-2026-33449

CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivably leading to a denial of service...