RLSA-2026:75583 Important: libvirt security, bug fix, and enhancement update

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems. Security Fixes: libvirt: swtpm privilege escalation via symlink following...

RLSA-2026:75570 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: freerdp-proxy: FreeRDP: Information disclosure via uninitialize...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, release...

libvirt security, bug fix, and enhancement update

An update is available for libvirt. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libvirt library contains a C API for managing and interacting with the...

CVE-2026-82592

D-Link 路由器 DIR-825M - /boafrm/formDiskFormat 中的缓冲区溢出 漏洞详情 详细信息 字段| 值 ---|--- 厂商| D-Link 产品| D-Link DIR-825M以及共享同一固件代码库的其他型号 受影响版本| 固件 v1.1.8 漏洞类型| 基于栈的缓冲区溢出CWE-121、命令注入CWE-78 厂商主页| https://www.dlink.com/ 漏洞描述 在对路由器固件进行安全审查时,在 /boafrm/formDiskFormat 端点中发现了一个严重漏洞。 该漏洞位于处理分区格式化的 sub46725C 函数中。该函数从...

CVE-2026-38698-and-CVE-2026-38699

Research on Wyze Cam Pan v3 Slides Reference CVE-2026-38698 Attack Name Heap Overflow on tutkpacketalloc function in tutkavserver Additional Details Afftected product TUTK SDK v.3.1.10.0 through v.4.3.8.1 Affected Component tutkpacketAlloc function Attack Vector An authenticated attacker must sen...

BIT-APACHE-2026-93546 Apache HTTP Server: mod_dav_fs namespace overflow

Integer overflow in moddavfs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with write access to crash worker processes and persistently corrupt a directory's property database via PROPPATCH requests declaring many XML namespaces...

BIT-APACHE-2026-63292 Apache HTTP Server: mod_vhost_alias stack overflow

Stack-based buffer overflow in modvhostalias in Apache Software Foundation Apache HTTP Server through 2.4.68 on all platforms allows a remote client to cause a denial of service or potentially execute arbitrary code via an HTTP request with a Host header exceeding 8192 bytes when...

CVE-2025-43300

CVE-2025-43300 CVE-2025-43300: iOS/macOS DNG 이미지 처리 메모리 손상 요약 Apple의 이미지 처리RawCamera.bundle의 취약점은 iOS 18.6.1 및 macOS 에 영향을 미칩니다. 이 문제는 DNG 파일에 불일치하는 TIFF 메타데이터 와 JPEG 무손실 매개변수 가 포함될 때 발생하여 메모리 손상을 초래합니다. 원인 TIFF 헤더는 SamplesPerPixel예상 채널 수을 정의합니다. JPEG 무손실은 SOF3 구성 요소 수실제 채널 수를 정의합니다. 이들이 일치하지 않으면...

patch-CVE-2026-08742

Patch: CVE-2026-08742 脆弱性の詳細 CVE : CVE-2026-08742 製品 : Citrix ADC 説明 : バッファオーバーフロー 重要度 : 重大 パッチステータス: デプロイ済み フィールド| 値 ---|--- パッチ日付| 2026-03-20 ステータス| デプロイ済み デプロイ先| 本番環境 検証者| SecOpsチーム 参考情報 NVD CISA KEV...

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772

watchTowr-vs-Citrix-Netscaler-CVE-2026-88772 Citrix NetScaler CVE-2026-88772 の検出アーティファクトジェネレーター 技術的な詳細については、ブログ記事をご覧ください。 実際の検出 / | | |\ \ \ / / \ \ / | | | | / \ / / \ \ \ / / | | \ | Y | | \ / | | / // || \ ||| | \ / // || / / / watchTowr-vs-Citrix-Netscaler-CVE-2026-88772.py...

cve-2022-42475-poc

CVE-2022-42475 PoC Fortinet SSL VPN 事前認証リモートコード実行 説明 CVE-2022-42475 は、FortiOS の SSL VPN サービスにおけるヒープベースのバッファオーバーフローの脆弱性であり、認証されていない攻撃者が /remote/error エンドポイントを標的とした巧妙に細工された HTTP リクエストを通じて、リモートから任意のコードを実行（RCE）できるようにします。 この脆弱性は、公式パッチが公開される前に実際の攻撃で積極的に悪用されていました（0-day）。 PoC の実行 次のスクリーンショットは、許可されたラボ環境での...

AZL-105969 CVE-2026-75818 affecting package aspell 0.60.8.1-1

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

DEBIAN-CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

The GNU Aspell prezip-bin utility contains a heap-based buffer overflow vulnerability within the decompressor located in prog/prezip.c. The root cause is an insufficient check of buffer space, allowing a crafted compressed file to trigger out-of-bounds read and write operations on the heap. An at...

EUVD-2026-93364

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...

CVE-2026-75818 Heap Buffer Overflow in GNU Aspell's prezip utility

GNU Aspell prezip-bin contains a heap-based buffer overflow vulnerability in the decompressor in prog/prezip.c. The decompressor does not properly check buffer space, so a crafted compressed file can cause out-of-bounds read and write operations on the heap. An attacker who convinces a user to...