CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

CVE-2026-67297 FreeRDP before 3.29.0 Resource Exhaustion via chunked HTTP response

FreeRDP before 3.29.0 fails to enforce the RESPONSESIZELIMIT when processing Transfer-Encoding: chunked HTTP responses in httpresponserecvbody. Attackers controlling a malicious RD Gateway endpoint can send oversized chunked response bodies to exhaust client memory resources without triggering th...

CVE-2026-67297

FreeRDP prior to 3.29.0 contains a flaw in http_response_recv_body() where RESPONSE_SIZE_LIMIT is not enforced for Transfer-Encoding: chunked HTTP responses. This allows an attacker controlling a malicious RD Gateway endpoint to send oversized chunked bodies, exhausting memory on the client. Impa...

CVE-2026-4765

Stored Cross-Site Scripting XSS vulnerability in the RD Station Conversas chat. The vulnerability resides in the ‘name’ parameter of the initialization process due to improper sanitization of user input. The vulnerability is not limited to self-exploitation: when a support agent joins the...

CVE-2026-4765

The CVE-2026-4765 issue affects Tallos Chat (RD Station Conversas) and is triggered in the initialization step via the ‘name’ parameter, where improper sanitization allows stored XSS. The vulnerability can execute arbitrary JavaScript in the context of the application, and is amplified because it...

CVE-2026-53330

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dpgeteqauxrdinterval Why & How The auxrdinterval array in struct dclttprcaps is declared with MAXREPEATERCNT - 1 7 elements, indexed 0..6. However, the offset parameter passed to...

PT-2026-54798

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix out-of-bounds read in dp get eq aux rd interval Why & How The aux rd interval array in struct dc lttpr caps is declared with MAX REPEATER CNT - 1 7 elements, indexed 0..6. However, the offset parameter passed...

CVE-2026-49774

Improper Control of Generation of Code 'Code Injection' vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6.0...

EUVD-2026-37056

Improper Control of Generation of Code 'Code Injection' vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6.0...

CVE-2026-49774

CVE-2026-49774 describes an "Improper Control of Generation of Code (Code Injection)" vulnerability in the WordPress RD Station plugin

CVE-2026-49774 WordPress RD Station plugin <= 5.6.0 - Remote Code Execution (RCE) vulnerability

Improper Control of Generation of Code 'Code Injection' vulnerability in Filipe Nasc RD Station allows Remote Code Inclusion. This issue affects RD Station: from n/a through 5.6.0...

WordPress RD Station plugin <= 5.6.0 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by ParkHyunWoo in WordPress Plugin RD Station versions = 5.6.0...

Linux kernel 安全漏洞

The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure of vgicallocateprivateirqslocked in the KVM ARM64 virtual GIC, causing it to exit...

[SECURITY] Fedora 42 Update: rust-rd-agent-2.2.5-14.fc42

Management agent for resctl-demo...

[SECURITY] Fedora 42 Update: rust-rd-hashd-2.2.5-10.fc42

Latency-sensitive pseudo workload for resctl-demo...

[SECURITY] Fedora 43 Update: rust-rd-agent-2.2.5-14.fc43

Management agent for resctl-demo...

[SECURITY] Fedora 43 Update: rust-rd-hashd-2.2.5-10.fc43

Latency-sensitive pseudo workload for resctl-demo...

Malicious code in nuyar-dad-rd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941f2c4a6396814d79d42a05f5a4d2e0ed3b9ba20965a103f5b8634c5b8b0ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-139098

Malicious code in nuyar-dad-rd npm...

MAL-2025-177151 Malicious code in nuyar-dad-rd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 941f2c4a6396814d79d42a05f5a4d2e0ed3b9ba20965a103f5b8634c5b8b0ca0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...