Linux SCTP Verify Function Data Compromise

The vulnerabilities of the functions sctpverifyasconf and sctpverifyparam in the net/sctp/smmakechunk.c component of the Linux kernel are related to insufficient resource control during their existence. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiali...

EUVD-2025-211112

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

Unbreakable Enterprise kernel security update

5.4.17-2136.360.3.1 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167664 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167666 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Unbreakable Enterprise kernel security update

5.15.0-325.221.6.4 - ipv4: free inetopt and ireqopt after an RCU grace period Eric Dumazet Orabug: 40167661 CVE-2026-98432 - ipv4: validate checksumstart before completing checksum Michael S. Tsirkin Orabug: 40167656 CVE-2026-99999 - netfilter: nfnetlinkqueue: unbreak SCTP traffic Antonio Ojea...

Linux kernel t7xx_port_ctrl_tx Heap Buffer Overflow DoS

The vulnerability of the t7xxportctrltx function in the drivers/net/wwan/t7xx/t7xxportwwan.c file of the Linux kernel is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

PT-2026-115582

The WP Sessions Time Monitoring Full Automatic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'action also function, plugin, post type, post status, ids, loggedout, and POST post title' parameter in all versions up to, and including, 1.1.5 due to insufficient input...

Nginx MCP Config Add Data Compromise

The vulnerability of the nginxconfigadd function in the MCP component of the Nginx UI server’s user interface relates to a flaw in the data protection mechanism. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Linux qat_vf_resume_write Heap Buffer Overflow DoS

The vulnerability of the qatvfresumewrite function in the drivers/vfio/pci/qat/main.c file of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of t...

FreeBSD: VID-05aadfcc-55f5-11f1-915c-8974b59277b5 (CVE-2026-46472): gstreamer1 -- multiple vulnerabilities

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

CVE-2026-46471

A heap-based buffer overflow vulnerability exists in GStreamer gst-plugins-good versions before 1.28.2 . The issue is located within the isomp4 plugin's qtdemux_parse_uuid function, which may read past the end of a heap-allocated buffer while parsing an MP4 file . This flaw could allow an attacke...

Linux net/sched/sch_hfsc.c Heap Buffer Overflow DoS

The vulnerability of the updatevf function in the net/sched/schhfsc.c component of the Linux kernel is related to the implementation of an incorrect control flow. Exploiting this vulnerability could allow an attacker to cause a service failure...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-131766)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-131766 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix memory leak if ntfsreadmft failed Label ATTRROOT in ntfsreadmft sets isroot = true...

Linux kernel Set RQ Size Buffer Overflow

The vulnerability of the setrqsize function in the drivers/infiniband/hw/mlx5/qp.c component of the Linux kernel is related to the improper implementation of the control flow. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of...

CVE-2026-46472

An issue was discovered in GStreamer gst-plugins-good before 1.28.2. While parsing an MP4 file, the isomp4 plugin's qtdemuxparsechnl function may read past the end of a global array, potentially leading to information disclosure...

EUVD-2025-211111

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-116164

Name of the Vulnerable Software and Affected Versions Arcane versions prior to 2.11.0 Description An authorization inconsistency exists in the AuthMiddleware.managerAuth function. When a request uses a valid environment access token via the X-Arcane-Agent-Token header, the system installs an...

PT-2026-116131

A flaw was found in libtirpc. A remote attacker can exploit this vulnerability by sending specially crafted PMAPPROC DUMP replies to a client application that uses the pmap getmaps function against an attacker-controlled host. This unbounded decoding can lead to excessive memory and CPU allocatio...

Linux kernel configfs_lookup Heap Buffer Overflow DoS

The vulnerability of the configfslookup function in the fs/configfs/dir.c component of the Linux kernel is related to the improper implementation of thread management. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-88753

A Regular-Expression Denial of Service ReDoS in the Markdown2. extractmetadata function lib/markdown2.py of trentm markdown2 through v2.5.5 allows attackers to cause a Denial of Service DoS via a crafted Markdown document...

Complete-google-dorks

Complete-google-sql-dorks news/news.php?id= -site:php.net -"The PHP Group" inurl:source inurl:url ext:pHp !Host=. intext:encUserPassword= ext:pcf ?action= ?cat= ?id= ?intitle:index.of? mp3 artist-name-here ?intitle:index.of? mp3 name ?page= ?pagerequested= ?pid= " -FrontPage-" ext:pwd inurl:servi...