229 matches found
CVE-2026-5663
A security flaw has been discovered in OFFIS DCMTK up to 3.7.0. This impacts the function executeOnReception/executeOnEndOfStudy of the file dcmnet/apps/storescp.cc of the component storescp. Performing a manipulation results in os command injection. Remote exploitation of the attack is possible...
OFFIS DCMTK 操作系统命令注入漏洞
OFFIS DCMTK is a collection of libraries and applications developed by the German company OFFIS that implement most DICOM standards. It includes software for checking, processing, and converting DICOM image files, handling offline media, sending and receiving images via network connections, as we...
Arbitrary File Write
Magic Wormhole is vulnerable to Arbitrary File Write. The vulnerability is due to improper validation of file paths during file reception, allowing a malicious sender to overwrite critical local files e.g., /.ssh/authorizedkeys, .bashrc and potentially compromise the system...
CVE-2026-26967
PJSIP is a free and open source multimedia communication library written in C. In versions 2.16 and below, there is a critical Heap-based Buffer Overflow vulnerability in PJSIP's H.264 unpacketizer. The bug occurs when processing malformed SRTP packets, where the unpacketizer reads a 2-byte NAL...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from failing to skip the rxnosta processing when the interface is not added. This could lead to warnin...
CVE-2022-33244
Transient DOS due to reachable assertion in modem during MIB reception and SIB timeout...
The vulnerability of the product suite for facilitating the reception of fax messages, the MICI Network NetFax Server, arises from the failure to implement measures to neutralize special elements. This allows a perpetrator to execute arbitrary commands.
The vulnerability of the product suite for facilitating the reception of fax messages related to MICI Network NetFax Server lies in the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993136)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993136 advisory. In the Linux kernel, the following vulnerability has been resolved: kcm: close race conditions on skreceivequeue sk-skreceivequeue is protected by skb queue lock, bu...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992480)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992480 advisory. In the Linux kernel, the following vulnerability has been resolved: tty: serial: fsllpuart: fix race on RX DMA shutdown From time to time DMA completion can come in...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992597)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992597 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: Fix UAF in ieee80211scanrx ieee80211scanrx tries to access scanreq-flags after a...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-992201)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992201 advisory. In the Linux kernel, the following vulnerability has been resolved: net/tunnel: wait until all skuserdata reader finish before releasing the sock There is a race...
kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets
A flaw out of bounds read in the Linux kernel Marvell mwifiex driver was found in the way user sends malicious Wi-Fi packets. A remote user with Wi-Fi connection could use this flaw to crash the system...
Talking to the Airgap: Exploiting Radio-Less Embedded Devices As Radio Receivers
Intelligent electronics are deeply embedded in critical infrastructures and must remain reliable, particularly against deliberate attacks. To minimize risks and impede remote compromise, sensitive systems can be physically isolated from external networks, forming an airgap. Yet, airgaps can still...
CVE-2025-40308
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bcsp: receive data only if registered Currently, bcsprecv can be called even when the BCSP protocol has not been registered. This leads to a NULL pointer dereference, as shown in the following stack trace: KASAN:...
kernel: wifi: mwifiex: Fix OOB and integer underflow when rx packets
A flaw out of bounds read in the Linux kernel Marvell mwifiex driver was found in the way user sends malicious Wi-Fi packets. A remote user with Wi-Fi connection could use this flaw to crash the system...
kernel: can: isotp: fix potential CAN frame reception race in isotp_rcv()
A potential CAN frame reception race flaw was found in isotprcv in the Linux kernel. This vulnerability may lead to a crash...
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: can: isotp: fix potential CAN frame reception race in isotprcv CVE-2022-48830 kernel: soc: qcom: cmd-db: Map shared memory as WC, not WB CVE-2024-46689 kernel: Squashfs: sanity check...
EUVD-2012-5463
Malware in sbrugna...