Rocky Linux 9.6 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal (ALMALINUX9.6:CLSA-2026:1784800448)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1784800448 advisory. - Vim is an open source, command line text editor. Prior to 9.2.0725, the single-byte branch of spellsoundfoldsal in src/spell.c translates...

TencentOS Server 4: libevent (TSSA-2026:1051)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1051 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...

AlmaLinux 9.2 [TuxCare] Security Update: radvd (ALMALINUX9.2:CLSA-2026:1783420753)

The AlmaLinux 9.2 host has a package installed that is affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1783420753 advisory. - radvd is a router advertisement daemon for IPv6. Prior to version 2.21, the radvdump utility shipped with radvd contains a stack buffer...

AlmaLinux 9.2 [TuxCare] Security Update: vim-X11 / vim-common / vim-enhanced / vim-filesystem / vim-minimal Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1737993483)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1737993483 advisory. - Out-of-bounds Read in GitHub repository vim/vim prior to 9.0.1143. CVE-2023-0049 - Vim before 9.0.2142 has a stack-based buffer...

AlmaLinux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770667352)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770667352 advisory. - Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a stack...

Rocky Linux 9.6 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1770667352)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1770667352 advisory. - Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedData message with maliciously crafted AEAD parameters can trigger a sta...

RHEL 9 : gimp (RHSA-2026:73768)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73768 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

AlmaLinux 8 : postgresql:12 (ALSA-2026:69924)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69924 advisory. postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions CVE-2026-14662 postgresql: PostgreSQL psql:...

CVE-2026-81433

WatchGuard Fireware OS is affected by a stack-based buffer overflow vulnerability in its DHCP fingerprinting daemon (fingerd ). An unauthenticated attacker with adjacent network access can exploit this by sending a specially crafted DHCP packet to execute arbitrary code or cause a process crash. ...

CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution

A stack-based buffer overflow vulnerability in WatchGuard Fireware OS's DHCP fingerprinting daemon fingerd allows an unauthenticated attacker with adjacent network access to execute arbitrary code or crash the process by sending a specially crafted DHCP packet...

CVE-2024-35333

CVE-2024-35333 html2xhtml 1.3 版本的字符集处理功能中存在一个栈缓冲区溢出漏洞。攻击者可通过提供特制输入来利用此漏洞，导致栈上变量 'buf' 溢出。成功利用此漏洞可使攻击者执行任意代码或导致应用程序崩溃，造成拒绝服务。 崩溃复现阶段 要复现崩溃，请访问项目网站并下载最新版本 1.3。 获取 tar 文件后，运行 tar xvf XYZ.tar 运行： ./configure make ./html2xhtml poc.html 您将收到段错误。让我们用 Address Sanitizer 分析它。 运行： make clean make...

CVE-2026-31024

CVE-2026-31024 漏洞报告：Steghide 基于栈的缓冲区溢出与信息泄露 字段| 值 ---|--- 目标应用| Steghide（Linux 二进制程序） 受影响版本| 0.5.1（已确认）；早期版本也可能受影响 漏洞类型| 基于栈的缓冲区溢出（CWE-121） 影响| 拒绝服务（DoS）、信息泄露 测试环境| Kali Linux 披露日期| 2026年1月16日 作者| Erik Dervishi 软件链接| https://salsa.debian.org/pkg-security-team/steghide CVSS v3.1 评分| 5.5（中危） CVSS 向...

CVE-2025-60751

CVE-2025-60751 CVE-2025-60751 的 PoC 受影响产品：Geographiclib = v2.5.1 完整分析文章见 https://zer0matt.blogspot.com/2026/05/cve-2025-60751-geographiclib-stack.html 描述 当 GeoConvert 接收特制输入时，会发生栈缓冲区溢出。 溢出发生的原因是程序未正确验证内部索引，从而允许在栈上进行越界写入。 攻击者可通过覆盖返回地址，使其指向 libc 函数（ret2libc），并利用 ROP 链执行任意代码，从而劫持程序的执行流程。 用法 python3...

SUSE-SU-2026:4396-1 Security update for python311

This update for python311 fixes the following issues: - CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. - CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. - CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one...

CVE-2026-11499

🚨 CVE-2026-11499 Tenda HG7 / HG9 / HG10 路由器中的栈缓冲区溢出 📖 概述 CVE-2026-11499 是一个报告的基于栈的缓冲区溢出漏洞 ，影响多个 Tenda 路由器型号 ，包括： HG7 HG9 HG10 成功利用该漏洞可能允许攻击者触发崩溃、拒绝服务，或根据易受攻击的代码路径和部署配置，潜在地实现远程代码执行（RCE） 。 ⚠️ 技术细节目前有限，公开披露似乎仍在进行中。 🎯 受影响的产品 厂商| 产品| 状态 ---|---|--- Tenda| HG7| 存在漏洞 Tenda| HG9| 存在漏洞 Tenda| HG10| 存在漏洞 🛠...

Security update for python310

This update for python310 fixes the following issues: CVE-2026-9669: crafted input can cause a stack buffer overflow bsc1267974. CVE-2026-15310: memory exhaustion in zipfile in bzip2/LZMA/Zstandard decompression bsc1277111. CVE-2026-15806: urllib.request.HTTPPasswordMgr credentials for one URL...

cve-2025-29384

CVE-2025-29384 概念验证漏洞利用 概述 此仓库包含一个针对 CVE-2025-29384 的高级概念验证 PoC 漏洞利用，该漏洞是 Tenda AC9 路由器运行固件版本 V15.03.05.14multi 时发现的一个严重 基于栈的缓冲区溢出 漏洞。此漏洞允许 未经认证的远程攻击者 使路由器的 Web 服务器崩溃（拒绝服务，DoS ），并可能执行任意代码（远程代码执行，RCE ）。 本项目旨在 演示漏洞利用开发技能 ，为网络安全社区做出贡献，并为学术评估（例如网络安全奖学金）提供教育展示。 此仓库包含一个针对 CVE-2025-29384 的高级概念验证 PoC...

BIT-FLUENT-BIT-2026-61674 Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/outforward/forward.c secureforwardpong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

CVE-2025-9961

CVE-2025-9961 TP-Link AX10/AX1500 CWMP 缓冲区溢出远程代码执行 概述 CWMP（TR-069）中的栈缓冲区溢出导致远程代码执行。 字段| 值 ---|--- 产品| TP-Link AX10, AX1500 受影响版本| AX10 B"Malicious ACS" B -- C"SetParameterValues" C -- D"Stack Overflow" D -- E"Overwrite PC" E -- F"ret2libc" F -- G"system" G -- H"RCE" 技术细节 漏洞存在于 cwmp 进程处理...

CVE-2026-12485

🚨 CVE-2026-12485 - 严重未授权远程代码执行 RCE GeoVision GV-I/O Box 4E – 固件 v2.09 披露日期： 2026年6月23日 CWE： CWE-121 – 基于栈的缓冲区溢出 攻击向量： 网络（未授权） GeoVision GV-I/O Box 4E 的 DVRSearch 服务中存在一个未授权的基于栈的缓冲区溢出漏洞，允许远程攻击者实现任意代码执行并完全控制受影响的设备。 📋 概述 字段| 值 ---|--- CVE ID| CVE-2026-12485 CVSS v3.1| 10.0（严重） CWE| CWE-121 受影响产品|...