CVE-2025-32433

Erlang/OTP SSH Remote Code Execution Vulnerability. The root cause is a flaw in the SSH protocol's message handling mechanism, allowing attackers to send connection protocol messages before authentication is complete. Notably, this vulnerability affects all Erlang/OTP versions running SSH server...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd Stack Overflow For educational and authorized testing only. Unauthorized use is illegal. Vulnerability Overview CVE-2026-53921 is a critical stack buffer overflow in OpenWrt’s odhcpd daemon – the default DHCPv6/DHCPv4/RA server. How it works The vulnerability exists in...

CVE-2025-32433

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH server allows unauthenticated remote code execution RCE. The flaw exists in the SSH protocol message handling mechanism, enabling attackers to execute arbitrary commands without requiring authentication credentials. Impact Critical severit...

EUVD-2026-97588

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286 Open WebUI 0.7.0 before 0.11.4 Session Token Theft via SyncStatsModal

Open WebUI from 0.7.0 before 0.11.4 contains a cross-origin message handling vulnerability in SyncStatsModal that allows any website to steal a signed-in user's session token by posting unvalidated verify:chat messages. Attackers can supply a path-traversal chat id redirecting the authenticated...

CVE-2026-109286

Versions of Open WebUI from 0.7.0 before 0.11.4 are vulnerable to a cross-origin message handling flaw in the SyncStatsModal component. This vulnerability, categorized as an Origin Validation Error (CWE-346) , allows an attacker-controlled website to steal a signed-in user's session token by post...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows an attacker with network access to an Erlang/OTP SSH server to execute arbitrary code without prior authentication. Description A serious vulnerability has been identified in the Erlang/OTP SSH server that may allow an attacker to...

CVE-2025-32433.py

CVE-2025-32433.py This Python PoC simulates SSH message flows, including key exchange, channel open, and command requests, to analyze server behavior. Intended for controlled lab testing, it demonstrates protocol handling, pre-auth message processing, and payload interactions for research and...

PT-2026-110703

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.7.0 through 0.11.3 Description A cross-origin message handling issue exists in the SyncStatsModal component. This allows an external website to steal a signed-in user's session token by sending unvalidated verify:chat...

USN-8682-1: Bind vulnerabilities

Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. CVE-2026-3039 Shuhan Zhang discovered that Bind incorrectly handled self-pointed...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-5946]

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND, due to multiple flaws causing an Improper Input Validation CVE-2026-5946. ISC BIND is used as part of our speech utilities. This vulnerability has been addressed. Please read the details for remediation below...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Do not attempt to process FASTREQ or EVENT messages. Currently, VF/PF relay actions only use regular REQUEST messages. The PF should not attempt to handle FASTREQUEST or EVENT messages, as doing so would break the VFPF...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...

Linux Distros Unpatched Vulnerability : CVE-2026-72360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

CVE-2026-49279 WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket Handler. The MessageSQLite.php handler only strips autoEvalCodeOnHTML from $json'msg', but msgToResourceId reads from...