CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-14457 RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

CVE-2026-14457

CVE-2026-14457 is a NULL pointer dereference (CWE-476) in OpenSSL's TLS implementation affecting configurations that use RFC 7250 Raw Public Keys (RPKs) with only a private key configured and no associated certificate. When a remote peer solicits RPKs and also sends the "signature_algorithms_cert...

CVE-2026-14457

Issue summary: In a server or client configuration with RFC7250 Raw Public Keys RPKs enabled, and only the private key with no associated certificate configured locally, a NULL pointer dereference may occur when the remote peer solicits raw public keys and also sends the typically omitted...

Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can...

SUSE-SU-2026:3800-1 Security update for go1.25-openssl

This update for go1.25-openssl fixes the following issues: Update to version 1.25.14 cut from the go1.25-fips-release branch at the revision tagged go1.25.14-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures c...

Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead to...

SUSE-SU-2026:3799-1 Security update for go1.26-openssl

This update for go1.26-openssl fixes the following issues: Update to version 1.26.7 cut from the go1.25-fips-release at the revision tagged go1.26.7-1-openssl-fips. Security issues fixed: - CVE-2026-33818: encoding/asn1: stack exhaustion when parsing deeply-nested, recursive structures can lead t...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in ajv (CVE-2025-69873)

Summary A Regular Expression Denial of Service ReDoS vulnerability in the ajv json-schema validator library CVE-2025-69873 used by IBM InfoSphere Optim Archive Viewer on Windows and Linux platforms has been addressed by upgrading the component versions to 6.14.0, 6.15.0, 8.18.0, and 8.20.0...

Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. CVE-2025-68818: scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort pat...

SUSE-SU-2026:3790-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP7 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-68741: scsi: qla2xxx: Fix improper freeing of purex item bsc1255703. - CVE-2025-68818: scsi: Revert 'scsi: qla2xxx: Perform lockless command completion in abort...

Exploit for Use After Free in Linux Linux_Kernel

pixel-ksu-root An adb-driven tool that turns a stock, locked-...

Acelle-Mail-4.2.0-p97-Unauthenticated-SSTI-to-RCE-Chain

Acelle Mail 4.2.0-p97 — Unauthenticated SSTI to RCE Chain V...

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation

Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation Analisi pratica di CVE‑2025‑62215, una race condition del kernel Windows sfruttata in natura. Dimostra l'escalation dei privilegi a SYSTEM, script di rilevamento e strategie di validazione delle patch per difensori aziendali ...

copyfailscan

copyfailscan Helper Bash: rileva gli host opzionale CIDR via nmap, quindi esegue controlli SSH di sola lettura per CVE-2026-31431 Copy Fail / algifaead, CVE-2026-31677 / CVE-2026-43077 euristiche AFALG RX, CVE-2026-23111 nftables + namespace utente, CVE-2026-23102 arm64 SVE/SME. Solo euristiche —...

dirtycow-lab

Dirty COW Lehr-PoC CVE-2016-5195 ⚠️ Rechtlicher Hinweis Dieser Code dient NUR ZU LEHRZWECKEN. Jegliche böswillige Nutzung ist strengstens untersagt und illegal. 📖 Was ist Dirty COW? Dirty COW CVE-2016-5195 ist eine Privilegienausweitungs-Schwachstelle im Linux-Kernel, die eine Race-Condition im...

CVE-2023-41898_Lab

CVE-2023-41898 Unvalidated Deep Link Lab Dieses Lab ist eine pädagogische, verkleinerte Reproduktion, die auf dem öffentlichen Schwachstellenbericht GHSL-2023-142 für Home Assistant Companion for Android und der Open-Source-Struktur der verwundbaren Version 2023.8.2 basiert. Es werden keine echte...

CVE-2026-1357

🧨 CVE-2026-1357 – Strumento di sfruttamento WPvivid Null-Key CVE-2026-1357.py Migration, Backup, Staging – WPvivid Backup & Migration ≤ 0.9.123 Vulnerabilità: Upload Arbitrario di File Non Autenticato → Esecuzione di Codice Remoto CVE: CVE-2026-1357 – CVSS 9.8 Critico GitHub:...

packetfence-CVE-2024-39024

Informazioni Ricercatore di sicurezza: ly1g3, ly1g3attuta.io Impronta GPG: https://keys.openpgp.org/vks/v1/by-fingerprint/5FE85CE4E8F675F5ABD2C0A33CE8BE447ED6D586 Panoramica: Remote Code Execution - Da utente autenticato di basso livello a admin RCE CVE: CVE-2024-3924 Cronologia: Scoperto - ly1g3...