Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1784800448)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784800448 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates...

Rocky Linux 9.6 [TuxCare] Security Update: gnutls / gnutls-c++ / gnutls-dane / gnutls-devel / gnutls-utils Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1775224602)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1775224602 advisory. - A flaw was found in GnuTLS. This vulnerability allows a denial of service DoS by excessive CPU Central Processing Unit and memor...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1737993483)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737993483 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Vim before 9.0.2142 has a stack-based buffer...

AlmaLinux 9.2 [TuxCare] Security Update: icu / libicu / libicu-devel / libicu-doc (ALMALINUX9.2:CLSA-2025:1762539763)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1762539763 advisory. - A stack buffer overflow was found in Internationl components for unicode ICU . While running the genrb binary, the 'subtag' struct overflow...

Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1772622920)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1772622920 advisory. - Vim is an open source, command line text editor. Prior to 9.1.2148, a stack buffer overflow vulnerability exists in Vim's NetBeans...

The vulnerability of the loongson_gpu_fixup_dma_hang() function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the loongsongpufixupdmahang function in the arch/loongarch/pci/pci.c module, which is part of the LoongArch architecture support for the Linux operating system, is related to a buffer overflow based on a stack. Exploiting this vulnerability could allow an attacker to compromi...

AlmaLinux 8 : postgresql:12 (ALSA-2026:69924)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69924 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql:...

CVE-2026-81433

WatchGuard Fireware OS is affected by a stack-based buffer overflow vulnerability in its DHCP fingerprinting daemon (fingerd ). An unauthenticated attacker with adjacent network access can exploit this by sending a specially crafted DHCP packet to execute arbitrary code or cause a process crash. ...

CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon fingerd allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP packet...

Security update for python311

This update for python311 fixes the following issues: CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL...

SUSE-SU-2026:4396-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one...

Security update for python310

This update for python310 fixes the following issues: CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL...

binary-exploitation

Binary Exploitation — Memory Corruption A hands-on study of t...

BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

ROS-20260929-73-0021

The vulnerability of the OnAssocReq function in the Linux operating system is related to buffer overflows based on stacks. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Amazon Linux 2 : 389-ds-base (ALAS-2026-3926)

The version of 389-ds-base installed on the remote host is prior to 1.3.10.2-17. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3926 advisory. A flaw was found in 389 Directory Server. An unauthenticated remote attacker can inject LDAP search filters into t...

ANT-2026-573F8CSS · cesnet/libyang · Memory Corruption / Stack Buffer Overflow

stack-buffer-overflow high GHSA-44h9-v855-6rj3 Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-573F8CSS: Stack buffer overflow...

ANT-2026-RNHRV8B9 · LibreOffice/core · Stack Buffer Overflow / Off-by-N

stack-buffer-overflow medium CVE-2026-63275 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-RNHRV8B9: CFF hint-stack bound...

ANT-2026-YA6ADR86 · LibreOffice/core · Memory Safety / Stack Buffer Overflow

stack-buffer-overflow medium CVE-2026-63276 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-YA6ADR86: CFF charstring to...

ANT-2026-WT5AMKP5 · wireshark/wireshark · Stack Buffer Overflow

stack-buffer-overflow medium CVE-2026-15166 GHSA-h9wc-3j4p-q5g3 Severity Claude high · Security research firm high · Maintainer medium Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-WT5AMKP5:...