100878 matches found
CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
CVE-2026-44254
In Wazuh versions 1.0.0 through 4.14.5, the root-level remoted daemon (TCP port 1514) writes a null terminator beyond a stack buffer during zlib decompression of agent messages, causing a denial of service. Exploitation is unconfirmed; patch to 4.14.6 or 5.0.0-beta2. https://github.com/wazuh/wazu...
CVE-2026-44254
Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...
CLSA-2026-1787152014 Fix CVE(s): CVE-2025-5222
SECURITY UPDATE: stack buffer overflow in the genrb resource-bundle compiler - debian/patches/CVE-2025-5222.patch: replace the fixed-size 1024-byte subtag/typeKeyword stack buffers in addCollation, parseCollationElements and realParseTable with CharString in source/tools/genrb/parse.cpp, and add...
php: PHP: Arbitrary code execution via out-of-bounds write in bccomp()
A flaw was found in PHP. A remote attacker could exploit this vulnerability by providing specially crafted inputs to the bccomp function. This could lead to an out-of-bounds write, resulting in stack and heap corruption. Such memory corruption can enable arbitrary code execution, allowing the...
CVE-2026-45741
Gotenberg (a Docker-powered stateless PDF API) versions 8.32.0 and earlier contain an SSRF deny-list bypass in the IsPublicIP function (pkg/gotenberg/outbound.go). The function fails to reject IPv6 transition prefixes (6to4 2002::/16, NAT64 64:ff9b::/96 and 64:ff9b:1::/48, deprecated site-local f...
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
MINI-4HCJ-W92V-VHR2
Bulletin has no description...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210 phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
phpMyFAQ before 4.1.6 does not adequately sanitize HTML in FAQ answers before generating PDFs via TCPDF. An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory e.g., content/core/config/database.php. Whe...
CVE-2026-76210
phpMyFAQ before 4.1.6 (some sources cite 4.1.7) contains an inadequate HTML sanitization flaw in FAQ answers before PDF generation via TCPDF . An attacker with permission to create or edit FAQ content can embed an tag whose src references a local file under the web root's content/ directory (e.g...
MINI-HM6M-52WH-8H85
Bulletin has no description...
MINI-JM6M-52VR-R678
Bulletin has no description...
MINI-2R8R-F5GJ-W6XR
Bulletin has no description...
MINI-QPF2-JVR3-H86X
Bulletin has no description...