Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: perf/aux: Fixed AUX buffer serialization. Ole reported that the event-mmapmutex is strictly insufficient to serialize the AUX buffer. To serialize it properly, a per-RB mutex should be added...

CURL-CVE-2026-87863 HSTS response erases persisted entries

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

CVE-2026-87863

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

UBUNTU-CVE-2026-87863

An authenticated HTTPS origin can supply an HSTS max-age value that the parser accepts, but time serialization later fails to process. On 64-bit systems, extreme max-age values compute an absolute expiry within standard time integer limits that exceeds calendar time structure bounds. During cache...

CLEANSTART-2026-JG13068 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-YN02098 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-DA50633 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-QO65396 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-RB86939 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-HN26495 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)

Security vulnerability affects the openjdk11 package. Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization...

CLEANSTART-2026-FM59801 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2022-21341 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

CLEANSTART-2026-MZ81816 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2022-21248 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

CLEANSTART-2026-VZ07098 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)

CVE-2024-21217 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. See references for individual vulnerability details...

PT-2026-114314

Name of the Vulnerable Software and Affected Versions curl affected versions not specified Description An authenticated HTTPS origin can provide an HSTS max-age value that is accepted by the parser but fails during subsequent time serialization. On 64-bit systems, extreme max-age values can resul...

CVE-2026-109345

DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because INPLACE mode returns a force-removed style element whose text content still carries markup. Attackers can supply a style element containing a closing style tag and an img...

EUVD-2026-97647

DOMPurify before 3.4.16 contains a cross-site scripting vulnerability that allows attackers to bypass sanitization because INPLACE mode returns a force-removed style element whose text content still carries markup. Attackers can supply a style element containing a closing style tag and an img...

zkar

ZKar ZKar es una herramienta de análisis del protocolo de serialización de Java implementada en Go. Esta herramienta aún está en desarrollo , por lo que no hay una guía de API completa ni de contribución. ZKar proporciona: Un analizador y visor de cargas útiles de serialización de Java en Go puro...

jenkins-cve-2016-0792

Jenkins CVE-2016-0792 Exploit para la vulnerabilidad de serialización de Jenkins - CVE-2016-0792 Base de datos de exploits https://www.exploit-db.com/exploits/42394/ Más información aquí 1. Contrast Security 2. Pentester Lab Requisitos 1. Python 3.6.x 2. La librería requests es necesaria para que...

freddy

Freddy, el asesino de la serialización - Buscador de errores de deserialización Una extensión de Burp Suite para ayudar a detectar y explotar librerías/API de serialización. Esta útil extensión fue desarrollada originalmente por Nick Bloor @nickstadb para NCC Group y se basa principalmente en el...

CLEANSTART-2026-XX88554 undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON

Security vulnerability affects the n8n package. undici's BalancedPool constructor passes its entire options object through an internal deep-clone that serializes and reparses the value as JSON...