JoeyZhou Xiaozhi ESP32 Server Java Authorization Vulnerability

JoeyZhou Xiaozhi ESP32 Server Java 6.1.0 and earlier versions have an authorization issue. This vulnerability stems from an authentication bypass. Unverified attackers can obtain a valid device WebSocket token by making a request to/api/device/ota with any MAC address. This allows them to open th...

Astra Linux – vulnerability in linux-6.1

In the Linux kernel, the following vulnerability has been resolved: media: aspeed: Fix memory overwrite if timing is 1600x900 When displaying in 1600x900 resolution, the system may crash if system memory usage is tight. How to reproduce this issue: 1. Use 1600x900 to display on the host. 2. Mount...

Astra Linux – vulnerability in libexif

LibExif up to version 0.6.25 contains a flaw in decoding MakerNotes. If the exifmnotedatagetvalue function receives a buffer with a size of 0, the provided buffer will be overwritten due to an integer underflow...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Before versions 6.9.13-48 and 7.1.2-23, an attacker who could connect to the magick-distribute-cache service could cause a heap buffer overwrite in the server process. This issue has been fixed in...

Astra Linux – Vulnerability in python-git

GitPython versions before 3.1.54 contain a vulnerability where an arbitrary file overwrite is possible, due to a flaw in the Diffable.diff method. This method fails to validate git options passed through thekwargs parameter. Attackers can provide the --output argument via another parameter, or us...

Astra Linux – Vulnerability in exim4

Exim 4 before 4.94.2 allowed execution with unnecessary privileges. The -oP option is available to the exim user, and it could lead to a denial of service, as files owned by root could be overwritten...

Astra Linux – Vulnerability in Linux

A vulnerability was discovered in aspeedlpcctrlmmap in drivers/soc/aspeed/aspeed-lpc-ctrl.c in the Linux kernel before version 5.14.6. Local attackers who had access to the Aspeed LPC control interface could overwrite memory in the kernel and potentially execute privileged operations, denoted as...

Astra Linux – Vulnerability in rsync

A vulnerability was discovered in rsync prior to version 3.2.5. This vulnerability allows malicious remote servers to write arbitrary files into the directories of connecting peers. The server determines which files/directories are sent to the client. However, the rsync client lacks sufficient...

Astra Linux – Vulnerability in OpenSSH

In OpenSSH 8.2, the scp client incorrectly sends duplicate responses to the server when a utimes system call fails. This allows a malicious, unprivileged user on the remote server to overwrite arbitrary files in the client’s download directory by creating a crafted subdirectory anywhere on the...

Astra Linux – Vulnerability in Vim

Vim is an open-source, command-line text editor. Prior to version 9.1.1552, a path traversal issue in Vim’s tar.vim plugin could allow overwriting of arbitrary files when opening specially crafted tar archives. The impact is limited because this exploit requires direct user interaction. However,...

Astra Linux – Vulnerability in Git

Git GUI allows you to use Git source control management tools through a graphical interface. When a user clones an untrusted repository and is tricked into editing a file located in a directory with a malicious name in the repository, Git GUI can create and overwrite files for which the user has...

Astra Linux – vulnerability in docker.io-app

The tar extraction routines in moby/go-archive—including Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers—do not restrict filesystem operations to the destination directory. Instead, the extractor determines where each archive entry should be placed via lexical string...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: perf/core: Fixed an issue where the perfoutputbegin parameter is incorrectly invoked in perfeventbpfoutput. syzkaller reports a issue with a stack-out-of-bounds condition. The call trace is as follows: dumpstack+0x9c/0xd3,...

Astra Linux – vulnerability in docker.io-app

Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary...

Astra Linux – vulnerability in ujson

UltraJSON is a fast JSON encoder and decoder written in pure C, with bindings for Python 3.7+. Versions affected were found to improperly decode certain characters. JSON strings containing escaped surrogate characters that do not form part of a valid surrogate pair were decoded incorrectly. This...

Astra Linux – vulnerability in linux-5.10, linux-5.15, linux-6.1

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to wait dio completion It should wait for all existing dio write I/O operations before removing a block; otherwise, prior direct write I/O might overwrite data in the block that could later be reused by another inode...

Astra Linux – vulnerability in vim

Vim is an open source, command line text editor. Prior to version 9.1.1551, a path traversal issue in Vim’s zip.vim plugin could allow overwriting of arbitrary files when opening specially crafted zip archives. The impact is low, as this exploit requires direct user interaction. However, successf...

SUSE CVE-2026-101337

When base64 data is split up in pieces, of 3 character or less, tokens were incorrectly calculated to produce 0 bytes. This enables attackers to overwrite the stack with up to 64K of attacker controlled data. Zone files which are written out by NSD itself, such as for zones for which the NSD...

WordPress Tutor LMS plugin < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content Overwrite vulnerability

Unauthenticated Tutor Page Force-Publish and Content Overwrite vulnerability discovered by Kevin Chen in WordPress Plugin Tutor LMS versions 4.1.1...

PYSEC-2026-4201 Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

Summary In banks.registries.DirectoryPromptRegistry, prompt file paths and the index file index.json do not refuse symbolic links. When a prompt directory contains or accepts untrusted files e.g. unpacked archives, shared repositories, or multi-tenant folders, symbolic links pointing outside the...