37413 matches found
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site...
golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname for example, xn--example-.com returns example.com instead of an error. Applications that validate the ASCII form then convert to Unicode may grant acce...
net/sched: act_tunnel_key: Defer dst_release to RCU callback
...
net/iucv: fix use-after-free of a severed iucv_path
...
net/x25: fix use-after-free in x25_kill_by_neigh()
...
net/packet: avoid fanout hook re-registration after unregister
...
net/iucv: take a reference on the socket found in afiucv_hs_rcv()
...
Security Update for Microsoft .NET Core (August 2026)
The Microsoft .NET Core installations on the remote host are missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the vendor advisory. - .NET Elevation of Privilege Vulnerability CVE-2026-58641, CVE-2026-62871, CVE-2026-62886, CVE-2026-62909 - .NET...
PT-2026-70594
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An issue exists where the inclusion of functionality from an untrusted control sphere allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there...
CVE-2026-62897
Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally...
CVE-2026-62902
Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network...
PT-2026-70778
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description An out-of-bounds write allows an unauthorized attacker to execute arbitrary code locally and remotely, potentially affecting the entire system. An out-of-bounds write occurs when a program write...
CVE-2026-62886
Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally...
PT-2026-70592
Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper removal of sensitive information before storage or transfer allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there is no informatio...
PT-2026-70695
Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description A relative path traversal issue allows an unauthorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer versio...
CVE-2026-62899
Inconsistent interpretation of http requests 'http request/response smuggling' in .NET allows an unauthorized attacker to bypass a security feature over a network...
CVE-2026-70354
Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally...
PT-2026-70572
Name of the Vulnerable Software and Affected Versions .NET Framework affected versions not specified Description Incorrect authorization allows an authorized attacker to elevate privileges over a network, which enables them to affect the system. Recommendations At the moment, there is no...
