Multiples vulnerabilities in Curl

use after free in SMB connection reuse CVE-2026-3805 Description When doing a second SMB request to the same host again, curl would wrongly use a data pointer pointing into already freed memory. INFO When the bad code hits, curl first makes a strlen on the freed memory pointer, then checks that t...

The vulnerabilities of the functions rxe_mr_alloc() and rxe_mr_init_user() in the driver/infiniband/sw/rxe/rxe_mr.c file of the Linux operating system’s InfiniBand driver module allow attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the functions rxemralloc and rxemrinituser in the driver/infiniband/sw/rxe/rxemr.c module of the Linux operating system’s InfiniBand driver is related to the repeated release of previously released memory. Exploiting this vulnerability could allow an attacker to compromise th...

EulerOS 2.0 SP10 : curl (EulerOS-SA-2026-2684)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : libcurl might in some circumstances reuse the wrong connection for SMBS transfers. libcurl features a pool of recent connections so that subsequent...

SUSE CVE-2026-8458

libcurl might in some circumstances reuse the wrong connection when asked to do Negotiate-authenticated ones, even when they are set to use different 'services'. libcurl features a pool of recent connections so that subsequent requests can reuse an existing connection to avoid overhead. When...

Security Bulletin: IBM WinCollect Agent is vulnerable to using components with known vulnerabilities

Summary Multiple components with known vulnerabilities were addressed in this release of IBM WinCollect Agent Vulnerability Details CVEID:CVE-2026-5545 DESCRIPTION: libcurl might in some circumstances reuse the wrong connection when asked to do an authenticated HTTPS request after a...

Google Chrome Resource Management Error Vulnerability (CNVD-2026-26523)

Google Chrome is a cross-platform web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.201 contained a resource management vulnerability, which stemmed from a reuse issue in AdFilter. Attackers could exploit this vulnerability by using specially crafted HTML pages an...

CVE-2026-46668

SpiceDB is an open source database system for creating and managing security-critical application permissions. From version 1.15.0 to before version 1.52.0, caveat structures with nested lists can result in improper cache reuse. This issue has been patched in version 1.52.0...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability, which stemmed from a reuse issue in PDFium. This vulnerability could allow remote attackers to exploit heap corruption through specially crafted...

Security update for curl

This update for curl fixes the following issues: Security issues fixed: CVE-2026-4873: connection reuse ignores TLS requirement bsc1262631. CVE-2026-5545: wrong reuse of HTTP Negotiate connection bsc1262632. CVE-2026-6253: proxy credentials leak over redirect-to proxy bsc1262635. CVE-2026-6276:...

CVE-2026-3784

curl would wrongly reuse an existing HTTP proxy connection doing CONNECT to a server, even if the new request uses different credentials for the HTTP proxy. The proper behavior is to create or use a separate connection...

The vulnerability of the qla2x00_terminate_rport_io() function in the drivers/scsi/qla2xxx/qla_attr.c file of the Linux SCSI device driver module allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the qla2x00terminaterportio function in the drivers/scsi/qla2xxx/qlaattr.c file of the Linux SCSI device driver module is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...

CVE-2025-61739 Johnson Controls IQ Panels2, 2+, IQHub, IQPanel 4, PowerG reusing a nonce, key pair in encryption

Due to Nonce reuse, attackers can perform reply attack or decrypt captured packets...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel has a security vulnerability that stems from a post-release reuse issue...

NetSurf 安全漏洞

NetSurf is a lightweight browser from the NetSurf organization. A security vulnerability exists in NetSurf version 3.11, which stems from a post-release reuse issue with the domnodesettextcontent function...

EUVD-2018-6223

Malware in sbrugna...

EUVD-2021-26839

Malware in sbrugna...

EUVD-2022-24647

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a post-release reuse issue when a concurrent smb2 tree is disconnected...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a post-release reuse issue that could lead to null pointer dereferencing...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a concurrent post-release reuse issue during NCI device separation...