CVE-2026-69439

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-69439

Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a network...

UBUNTU-CVE-2026-69806

Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally...

Linux Distros Unpatched Vulnerability : CVE-2026-86564

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio- net control-queue handler can cause an out-of-bounds rea...

Linux Distros Unpatched Vulnerability : CVE-2026-58649

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Origin validation error in .NET allows an unauthorized attacker to disclose information over a network. CVE-2026-58649 Note that Nessus relies on the presence o...

Linux Distros Unpatched Vulnerability : CVE-2026-69806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Exposure of sensitive information to an unauthorized actor in .NET allows an authorized attacker to elevate privileges locally. CVE-2026-69806 Note that Nessus...

CVE-2026-68138

CVE-2026-68138 — Linux 内核 net/sched qdisc 速率表 UAF 跟踪站点 CVE-2026-68138 补丁状态跟踪器的来源：一个单页站点，记录哪些发行版已为 Linux 内核中 net/sched qdisc 速率表的释放后使用 / 双重释放（use-after-free / double-free）漏洞发布了修复。 事实所在 关于该漏洞的所有信息——CVE ID、受影响版本和已修复版本、上游修复提交、发现与披露致谢，以及当前各发行版的补丁状态——均属于跟踪器页面，而非本 README： 渲染页面：...

cve-2022-29117-assessment

cve-2022-29117-assessment Marco de evaluación, comprensión y preguntas sobre CVE-2022-29117 DoS por manejo de cookies en .NET...

CVE-2026-86287

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2022-23277

exchCVE-2021-42321 本文是7bits安全团队文章《DotNet安全-CVE-2022-23277漏洞复现》涉及到的工具 认证部分需要通过burpsuite手动添加，利用成功后会在aspnetclient写入1.aspx。 webshell: root@kitploit: 利用详情可以参照我们的文章 欢迎关注我们的公众号 - Zbits2022...

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-86287 Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

CVE-2026-86287

Net::IP::LPM (Perl) versions before 1.12 accept malformed prefix lengths: non-numeric and non-ASCII values are treated as 0, and integers over 31 bits are silently truncated. A single malformed mask poisons the lookup table , causing every subsequent lookup to succeed. In practice, an allow-list ...

EUVD-2026-72526

Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths. Non-numeric and non-ASCII prefix lengths are accepted and treated as 0. Integers over 31 bits are silently truncated. A single malformed mask will poison the lookup table. The result is that the lookup will silently succe...

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Use After Free

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

Oracle Linux 9 : qemu-kvm (ELSA-2026-500245)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-500245 advisory. - dmg: reject inconsistent UDRW chunk sector count and length CVE-2026-65928 Stefan Hajnoczi Orabug: 39849788 CVE-2026-65928 - dmg: fix out-of-bounds...

Linux Distros Unpatched Vulnerability : CVE-2026-80779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q-index equal to lif-ionic-nrxqsperlif. The...

CVE-2026-86304

MojoX::Authentication versions before 0.006 for Perl contain a SAML authentication bypass in parse_assertion (MojoX::Authentication::Model::SAML2). The method calls Net::SAML2::Binding::POST->new without any trust anchor (cacert, cert_text, or anchors), then passes the result to Net::SAML2::Pr...

Unity Linux 20.1050a Security Update: kernel (UTSA-2026-053292)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-053292 advisory. In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9clientrpc Syzbot with the help of KMSAN reported the following erro...