OPENSUSE-SU-2026:22023-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 154.0.8037.97 boo1284015 CVE-2026-103628: Out of bounds write in WebGL CVE-2026-103626: Incorrect authorization in FileSystem CVE-2026-103621: Integer overflow in Compositing CVE-2026-103630: Use after free in...

CVE20264893poc

Topologia: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Passos 1.vi /etc/dnsmasq.conf port=5353 listen-address=xxx.xxx.xxx.x bind-interfaces no-resolv no-hosts no-poll cache-size=1000 log-queries log-facility=-...

Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

SUSE-SU-2026:4531-1 Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension...

CVE-2026-48095

CVE-2026-48095 7-Zip ist ein Dateiarchivierer mit hoher Komprimierungsrate. Die Versionen 26.00 und früher enthalten eine Heap-Pufferüberlauf-Schwachstelle, die durch eine Unterallokation im NTFS-komprimierten Stream-Puffer GetCuSize-Shift-UB verursacht wird, die es Angreifern potenziell...

CVE-2026-12485

🚨 CVE-2026-12485 - Kritische, nicht authentifizierte Remote-Codeausführung RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Offenlegungsdatum: 23. Juni 2026 CWE: CWE-121 – Stapelbasierter Pufferüberlauf Angriffsvektor: Netzwerk nicht authentifiziert Eine nicht authentifizierte Schwachstelle in Form...

The Hidden DoS Vector in SQL Parsers

SQL parsers are critical components of the modern data stack. They validate queries before they reach the database, transpile between dialects, and lint codebases for style violations. Increasingly, they also power AI-driven SQL generation in LLM-integrated data tools. Our research focused on two...

gd security update

An update is available for gd. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GD is an open source code library for the dynamic creation of images by programmer...

RLSA-2026:75680 Important: gd security update

GD is an open source code library for the dynamic creation of images by programmers. GD creates PNG, JPEG, GIF, WebP, XPM, BMP images, among other formats. Security Fixes: libgd: buffer overflow when processing specially crafted GIF file CVE-2026-9672 For more details about the security issues,...

RLSA-2026:75582 Important: librabbitmq security update

The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using protocol version 0-9-1. Security Fixes: rabbitmq-c: rabbitmq-c: Heap buffer overflow leading to denial of service CVE-2026-44236 For more details about...

librabbitmq security update

An update is available for librabbitmq. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The librabbitmq packages provide an Advanced Message Queuing Protocol AMQ...

Savannah lwIP SMTP client

ADVISORY SUMMARY Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC de Heap Overflow no WLAN AP da MediaTek Exploit de prova de conceito para o CVE-2026-20452, um estouro de buffer baseado em heap no driver de WLAN Access Point da MediaTek. Vulnerabilidade CVE : CVE-2026-20452 CVSS : 8.0 ALTO CWE : CWE-122 — Estouro de buffer baseado em heap...

CVE-2025-4517-tarfile-PATH_MAX-bypass

CVE-2025-4517 / CVE-2025-4330 — Python tarfile Datenfilter-Umgehung via PATHMAX-Überlauf Autor: 0xDTC CVEs: CVE-2025-4517 / CVE-2025-4330 Advisory: GHSA-6r6c-684h-9j7p CPython-Fix: PR 135037 Überblick Python's tarfile.extractallfilter="data" soll Tar-Archive sicher extrahieren, indem es...

CVE-2025-29338

CVE-2025-29338 — Aviso de Segurança Buffer Overflow no Driver de Kernel Wi-Fi moal.ko da NXP woalsetupmoduleparam / parsecfggetline Campo| Valor ---|--- ID CVE| CVE-2025-29338 Gravidade| Alta Pontuação CVSS v3.1| 7.8 Vetor CVSS v3.1| CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Tipo de...

misfortune-cookie

Suíte PoC do CVE-2014-9222 "Misfortune Cookie" Estouro de pilha no tratamento de cookies HTTP do AllegroSoft RomPager todas as versões 4.34. Uma única requisição não autenticada com um cabeçalho Cookie: adulterado corrompe a memória. Efeitos: bypass de autenticação de admin, DoS/reboot e com...

CVE-2026-54992-PoC

CVE-2026-54992 PoC Prova de conceito para o estouro de inteiro de leitura remota do Microsoft Message Queuing identificado como CVE-2026-54992. A PoC usa duas VMs Windows. Um usuário comum no alvo vulnerável solicita ao serviço MSMQ local que leia de uma fila hospedada pelo helper. O helper retor...

CVE-2026-42945

🛡️ CVE-2026-42945 - NGINX Rift Kritischer Heap-basierter Pufferüberlauf in NGINX 📌 Übersicht CVE-2026-42945 auch bekannt als NGINX Rift ist eine kritische Sicherheitslücke im ngxhttprewritemodule von NGINX. Typ : Heap-basierter Pufferüberlauf CWE-122 Entdeckt : Mai 2026 Existierte seit : 18 Jahren...

ffmpeg-vul-core

FFmpeg h.264 Slice Counter OOB Vulnerability Core A minimal r...

PX4-Military-UAV-Autopilot-1.12.3-Stack-Buffer-Overflow-Exploit-CVE-2025-5640-

Exploit de Estouro de Buffer de Pilha no Autopiloto Militar de UAV PX4 =1.12.3 CVE-2025-5640 Autor: Mohammed Idrees Banyamer @banyamersecurity GitHub: https://github.com/mbanyamer Data: 2025-06-21 Testado em: Ubuntu 20.04 LTS + PX4 SITL jMAVSim CVE: CVE-2025-5640 Tipo: Negação de Serviço DoS via...