CVE-2026-107890

A flaw was found in CUPS. An attacker who can submit print jobs can exploit this issue by sending a crafted request containing repeated Internet Printing Protocol IPP group tags. This triggers a NULL pointer dereference during job processing, causing the print scheduler daemon cupsd to crash and...

BIT-THRIFT-2026-93925 Apache Thrift: C++ `THeaderTransport::writeVarint32()` stack buffer overflow on a negative protocol id

Stack-based buffer overflow, Incorrect bitwise shift of integer vulnerability in Apache Thrift C++ THeaderProtocol. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Security update for php8

This update for php8 fixes the following issues: CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. CVE-2026-6103: Archive entry injection via integer...

SUSE-SU-2026:4602-1 Security update for php8

This update for php8 fixes the following issues: - CVE-2025-1218: php: php: Denial of Service via out-of-bounds read in mysqlnd wire protocol parser bsc1282981. - CVE-2025-14181: Integer overflow to buffer overflow in soap HTTP parsing bsc1283216. - CVE-2026-6103: Archive entry injection via...

isf

Framework de Explotación Industrial ISF Industrial Exploitation Framework es un framework de explotación basado en Python, similar al framework de metasploit. ISF está basado en el proyecto de código abierto routersploit. Lee esto en otros idiomas:Inglés, 简体中文, Aviso legal El uso de ISF para atac...

urh

El Universal Radio Hacker URH es una suite completa para la investigación de protocolos inalámbricos con soporte nativo para muchas Radios Definidas por Software comunes. URH permite una fácil demodulación de señales combinada con una detección automática de parámetros de modulación, lo que...

CLEANSTART-2026-UY82629 mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them

Security vulnerability affects the php package. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them...

Linux Distros Unpatched Vulnerability : CVE-2026-107655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in CUPS. When processing embedded job ticket comments within documents, the service improperly handles specific IPP attributes, causing an...

Cisco NX-OS NGOAM Protocol Code Execution

The vulnerability of the NGOAM protocol implementation in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series devices lies in the fact that operation data is written outside of the buffer in memory. Exploiting this vulnerability allows a malicious act...

OpenSSL Heap Buffer Overflow DoS

The vulnerability of the TLS and SSL OpenSSL protocol-related tools is related to reading data from within allowable buffer limits. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2026-108770

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read occurs in the bpf sock destroy function. The issue arises because the function attempts to read the sk protocol variable from a socket object. However, when a...

Linux Distros Unpatched Vulnerability : CVE-2026-107675

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains a missing host key verification vulnerability in the libssh-based sftp protocol handler that allows network attackers to impersona...

com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

com.ethlo.keyvalue:keyvalue-cache (>=1.0.0, <=1.1.2), com.ethlo.keyvalue:keyvalue-sync (>=1.0.0, <=1.1.2) +33 more potentially affected by CVE-2026-107726 via com.hazelcast:hazelcast (3.12.3)

com.hazelcast:hazelcast MAVEN version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.ethlo.keyvalue:keyvalue-cache =1.0.0, =1.0.0, =3.2.11, =3.3.6 and more Source cves: CVE-2026-107726 Source...

com.hazelcast.jet:hazelcast-jet-client-protocol (0.6), com.hazelcast.jet:hazelcast-jet-core (0.6) +4 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.10-beta-2)

com.hazelcast:hazelcast MAVEN version 3.10-beta-2 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet-client-protocol 0.6 - com.hazelcast.jet:hazelcast-jet-core 0.6 -...

com.hazelcast.jet:hazelcast-jet (0.3), com.hazelcast.jet:hazelcast-jet-client-protocol (0.3) +6 more potentially affected by CVE-2026-107725 via com.hazelcast:hazelcast (3.8-rc1)

com.hazelcast:hazelcast MAVEN version 3.8-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on com.hazelcast:hazelcast and may be impacted: - com.hazelcast.jet:hazelcast-jet 0.3 - com.hazelcast.jet:hazelcast-jet-client-protocol 0.3 -...

CVE-2026-82335

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based buffer overflow in the MongoDB protocol parser. A remote attacker could send a specially crafted MongoDB SCRAM username containing an excessive length and cause memory corruption, potentially resulting in denial of servic...

MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

NPM: MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NOBACKSLASHESCAPES vulnerability discovered by ? in WordPress Npm mariadb versions 3.2.5...

GHSA-R3RV-JM3R-62Q2 MariaDB Connector/Node.js: SQL injection in the text protocol when the session uses NO_BACKSLASH_ESCAPES

Description When escaping string and binary parameters for the text protocol, the connector always escaped the quote character with a backslash, without ever consulting the session's NOBACKSLASHESCAPES SQL mode. The server status flag was declared STATUSNOBACKSLASHESCAPES but never read. Under a...