CVE-2026-107216

The Excelize Go library (versions 2.8.1 to 2.11.0 ) contains a vulnerability where ANCHORARRAY recursively calls the CalcCellValue function. This causes mutually-referencing dynamic-array formulas to recurse unboundedly because each recursive hop creates a fresh calculation context, bypassing in-...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-107216 Excelize ANCHORARRAY: mutually-referencing array formulas recurse unboundedly via re-entrant CalcCellValue, causing a fatal stack overflow

Excelize is a Go language library for reading and writing Microsoft Excel spreadsheets. From 2.8.1 to 2.11.0, ANCHORARRAY recursively calls the exported CalcCellValue function, creating a fresh calculation context at each cycle and bypassing in-flight and iteration controls. ANCHORARRAY calls...

CVE-2026-106572

A flaw was found in ImageMagick. A remote attacker can trigger a Denial of Service DoS by submitting a specially crafted Continuous Acquisition and Life-cycle Support CALS raster image for processing. Due to a missing recursion depth limit in the CALS decoder, parsing the malicious file exhausts...

CVE-2025-27480-The-Silent-Gateway-Risk

CVE-2025-27480-沉默的网关风险 让攻击者无需破解密码、无需用户交互、甚至无需在你的网络中立足即可运行恶意代码。这就是 CVE-2025-27480 夜深了，你靠着红牛硬撑——我们都经历过。你在排查一个生产环境问题，强忍着回去睡觉的冲动，急于解决问题然后倒头就睡，于是你把远程桌面协议（RDP）访问暴露到了互联网上。你告诉自己稍后会关掉。但"过一会儿"变成了"永远不会"，那个被遗忘的网关变成了一扇沉默的门，等着任何一个碰巧带着网络嗅探器路过的人——哦，发现 3389 端口开放，真是"乐趣"无穷。 CVE-2025-27480...

MGASA-2026-0470 Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...

Updated tesseract packages fix security vulnerabilities

This is a security update. It fixes nine vulnerabilities in tesseract, the OCR text recognition engine. All nine can be triggered only by feeding tesseract a maliciously crafted input file: either a specially crafted recognition/language data file .traineddata or a crafted word-list file. Dependi...

CVE-2026-106572

The ImageMagick image manipulation library is vulnerable to a stack overflow due to a missing recursion-depth check in the CALS decoder . A crafted CALS image can trigger this issue, leading to call stack exhaustion and subsequent process termination. This vulnerability affects versions prior to ...

CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

EUVD-2026-94391

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

CVE-2026-106572 ImageMagick: Stack Overflown CALS decoder due to missing depth check.

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-30 and 6.9.13-55, a missing recursion-depth check in the CALS decoder allows a crafted CALS image to exhaust the call stack and terminate the process. This issue is fixed in versions...

Security update for fetchmail

This update for fetchmail fixes the following issue: CVE-2026-94184: stack-based buffer overflow in NTLM authentication can lead to remote code execution or process termination bsc1282055. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...

DEBIAN-CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2026-104074

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

cve-2019-13132-lab

CVE-2019-13132 — libzmq CURVE INITIATE 栈溢出 → RCE 实验室 针对 CVE-2019-13132 的端到端可用 RCE 漏洞利用程序 + 可重现实验室，该漏洞是 libzmq 的 CURVE INITIATE 握手处理程序中的栈缓冲区溢出。知道服务器长期公钥（这是一个公开参数）的攻击者可以溢出 processinitiate 中的固定大小栈缓冲区，覆盖保存的返回地址，并将执行重定向到任意代码。 作者：Nicolas Krassas @dinosn 仅供实验室使用。 本工具包附带了一个故意留有漏洞的 libzmq...

CVE-2026-104074 Coturn 4.10.0 Uninitialized Stack Memory Disclosure via ERROR-CODE

Coturn 4.10.0 contains an uninitialized memory disclosure vulnerability that allows remote unauthenticated attackers to leak stack memory contents by sending a TURN Allocate request without credentials. Attackers can exploit the stuniniterrorresponsecommonstr function in src/client/nsturnmsg.c,...

CVE-2021-31166

CVE-2021-31166 0x00. 描述 这是 CVE-2021-31166（“HTTP 协议栈远程代码执行漏洞”）的概念验证代码，该漏洞是 http.sys 中一个释放后使用（use-after-free）解引用漏洞，微软已于 2021 年 5 月发布补丁。 据我所知，它只能触发程序崩溃，请谨慎使用。 0x01. 影响范围 Windows Server, version 20H2 Server Core Installation Windows 10 Version 20H2 for ARM64-based Systems Windows 10 Version 20H2 for...

CVE-2026-15894

The Bluetooth Mesh On-Demand Private Proxy solicitation handler in subsys/bluetooth/mesh/solicitation.c copies a received Solicitation PDU into a fixed 17-byte stack buffer without bounding the source length. In solpdudecrypt, out is allocated as NETBUFSIMPLE17 and then filled with...

CVE-2013-2028_Checker

CVE-2013-2028 - Nginx HTTP 服务器 1.3.9-1.4.0 分块编码栈缓冲区溢出 描述 nginx 1.3.9 至 1.4.0 版本中 http/ngxhttpparse.c 文件的 ngxhttpparsechunked 函数允许远程攻击者通过一个带有超大分块大小的分块传输编码请求造成拒绝服务（崩溃）并执行任意代码，该漏洞触发整数符号错误和基于栈的缓冲区溢出。 示例 $ python3 nginxcve20132028checker.py http://172.17.0.3 ! Target: http://172.17.0.3 Nginx version:...