EUVD-2026-93099

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix nextbuffer UAF and NextCommand bounds in compound PDUs Fix several related bounds checking and pointer lifecycle issues in receiveencryptedstandard's handling of compound encrypted frames: - Clear nextbuffer afte...

CVE-2026-9256

CVE-2026-9256 — сайт отслеживания переполнения кучи в nginx rewrite-module Исходный код трекера статуса патча CVE-2026-9256: одностраничный сайт, фиксирующий, какие дистрибутивы выпустили исправление для переполнения кучи в nginx rewrite-module. Где находятся факты Вся информация об уязвимости —...

Security update for the Linux Kernel (Live Patch 57 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.228 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63917: ip6: vti: Use ip6tnl.net in...

SUSE-SU-2026:4540-1 Security update for the Linux Kernel (Live Patch 30 for SUSE Linux Enterprise 15 SP6)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150600.23.130 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension heade...

Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc1272283...

SUSE-SU-2026:4518-1 Security update for the Linux Kernel (Live Patch 4 for SUSE Linux Enterprise 15 SP7)

This update for the SUSE Linux Enterprise Kernel 6.4.0-150700.53.16 fixes various security issues: The following security issues were fixed: - CVE-2026-46116: xfrm: defensively unhash xfrmstate lists in xfrmstatedelete bsc1267370. - CVE-2026-63802: blk-cgroup: fix UAF in blkcgrstatflush bsc127228...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — PoC переполнения стека SNMPv3 в lwIP Эксплойт уровня proof-of-concept для CVE-2026-8836 — критического переполнения буфера на основе стека в обработчике USM протокола SNMPv3 в lwIP. Уязвимость CVE : CVE-2026-8836 CVSS : 9.8 Критическая Компонент : snmpparseinboundframe в...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP Переполнение буфера RCE Обзор Переполнение стека буфера в CWMP TR-069, приводящее к удаленному выполнению кода. Поле| Значение ---|--- Продукт| TP-Link AX10, AX1500 Затронутые версии| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D ...

CVE-2025-21333

CVE-2025-21333 Hyper-V NT Kernel Integration VSP vkrnlintvsp.sys: переполнение кучи Paged Pool → локальное повышение привилегий LPE. Этот каталог содержит исходный код PoC для лаборатории на основе MrAle98/CVE-2025-21333-POC, с локальными патчами. 1. Сводка уязвимости Поле| Содержание ---|--- CVE...

CVE-2026-105778

A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...

EUVD-2026-92987

A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...

CVE-2026-105778

The Tenda AC5 router, running firmware version 02.03.01.111_multi , is vulnerable to a stack-based buffer overflow in the Wifi Handler component. Specifically, a flaw in the /goform/setWifi file allows an attacker to trigger the overflow by manipulating the wifiPwd argument. This vulnerability ca...

CVE-2026-105778 Tenda AC5 Wifi setWifi stack-based overflow

A vulnerability has been found in Tenda AC5 02.03.01.111multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...

CVE20264893poc

Топология: https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Шаги​ 1.vi /etc/dnsmasq.conf​ port=5353​ listen-address=xxx.xxx.xxx.x bind-interfaces​ no-resolv​ no-hosts​ no-poll​ cache-size=1000​ log-queries​ log-facility=-​...

SUSE-SU-2026:4531-1 Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: - CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. - CVE-2026-63920: ipv6: validate extension...

Security update for the Linux Kernel (Live Patch 58 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise Kernel 5.14.21-150400.24.235 fixes various security issues: The following security issues were fixed: CVE-2026-63888: scsi: target: iscsi: Fix CRC overread and double-free in iscsithandletextcmd bsc1272391. CVE-2026-63920: ipv6: validate extension header...

CVE-2026-48095

CVE-2026-48095 7-Zip — это файловый архиватор с высокой степенью сжатия. Версии 26.00 и более ранние содержат уязвимость переполнения буфера в куче, вызванную недостаточным выделением памяти в буфере сжатого потока NTFS неопределённое поведение сдвига в GetCuSize, что потенциально позволяет...

CVE-2026-12485

🚨 CVE-2026-12485 - Exécution de Code à Distance Critique non Authentifiée RCE GeoVision GV-I/O Box 4E – Firmware v2.09 Date de divulgation: 23 juin 2026 CWE: CWE-121 – Débordement de tampon basé sur la pile Vecteur d'attaque: Réseau non authentifié Une vulnérabilité de débordement de tampon basé...

The Hidden DoS Vector in SQL Parsers

SQL parsers are critical components of the modern data stack. They validate queries before they reach the database, transpile between dialects, and lint codebases for style violations. Increasingly, they also power AI-driven SQL generation in LLM-integrated data tools. Our research focused on two...

mediatek-wlan-heap-overflow-cve-2026-20452-filogic-router-rce

CVE-2026-20452 — PoC переполнения кучи в MediaTek WLAN AP Эксплойт Proof of Concept для CVE-2026-20452 — переполнение буфера в куче в драйвере точки доступа WLAN MediaTek. Уязвимость CVE : CVE-2026-20452 CVSS : 8.0 ВЫСОКИЙ CWE : CWE-122 — Переполнение буфера в куче Подкомпонент : wlan драйвер AP...