Moderate: glibc security update

The glibc packages provide the standard C libraries libc, POSIX thread libraries libpthread, standard math libraries libm, and the name service cache daemon nscd used by multiple programs on the system. Without these libraries, the Linux system cannot function correctly. Security Fixes: glibc:...

PT-2026-106343

A vulnerability has been found in Tenda AC5 02.03.01.111 multi. Affected by this issue is some unknown functionality of the file /goform/setWifi of the component Wifi Handler. Such manipulation of the argument wifiPwd leads to stack-based buffer overflow. It is possible to launch the attack...

Stack-based buffer overflow vulnerability exists in the Brocade Fabric OS SNMP daemon handling

: A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

Stack-based Buffer Overflow in REST API device management component of Brocade Fabric OS

: Multiple stack-based buffer overflow vulnerabilities exist in the REST API management component of Brocade Fabric OS versions prior to 10.0.1. When processing API request payloads—such as device configuration attributes or port mapping requests—the REST API service fails to properly validate...

Stack-Based Buffer Overflow in Setuid Diagnostic Utility via Argument Parsing

: A stack-based buffer overflow vulnerability exists in the diagnostic execution utility of Brocade Fabric OS versions before 10.0.1. When processing command arguments for diagnostic operations, the utility tokenizes user-supplied input into an internal argument array without enforcing boundary...

Stack-based Buffer Overflow in Certificate Parsing Service of Brocade Fabric OS

: A stack-based buffer overflow vulnerability exists in the security library component of Brocade Fabric OS versions before 10.0.1. When parsing uploaded X.509 PEM certificates for management display, the system improperly validates the length of the Authority Key Identifier AKI extension before...

Pre-Authentication Stack-Based Buffer Overflow in IKEv2 Key Exchange Processing

: A stack-based buffer overflow vulnerability exists in the Internet Key Exchange IKEv2 protocol handler on Brocade Fabric OS versions before 10.0.1. The vulnerability occurs when processing initial IKE key exchange requests on extension switches or blades running IPsec-enabled Fibre Channel over...

Rocky Linux 9.6 [TuxCare] Security Update: delve Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1791279538)

The Rocky Linux 9.6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791279538 advisory. - Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures...

Windows-CVE-2024-38063

Windows CVE-2024-38063 CVE ID: CVE-2024-38063 CVSS 3.1 スコア: 9.8（緊急） EPSS スコア: 低 - 0.088% https://www.cvedetails.com/epss/CVE-2024-38063/epss-score-history.html 影響: リモートコード実行 影響を受けるコンポーネント: Windows TCP/IP スタック 攻撃ベクター: ネットワーク（リモート） 脆弱性の詳細 CVE-2024-38063 は、特別に細工された IPv6...

CVE-2025-5548

🐞CVE-2025-5548 FreeFloat FTP Server 1.0 におけるバッファオーバーフロー 🎯 スタックバッファオーバーフロー攻撃 このリポジトリには、32ビットWindows環境におけるリバースエンジニアリングとメモリレベルの脆弱性（スタックバッファオーバーフロー）の悪用に焦点を当てたサイバーセキュリティプロジェクトのドキュメントと実践的な開発が含まれています。 📌 プロジェクトの目的 このプロジェクトの目的は、ASLRやDEPなどの最新のセキュリティ緩和策が欠如していることで知られるFreefloat FTP Server v1.00...

CVE-2013-3664_MAC

Sketchup MAC Pict Material Palette Stack Corruption - CVE-2013-3664 SketchUpは、埋め込まれたMACPictテクスチャを解析する際に入力の検証に失敗します。悪意のあるテクスチャ、サムネイル、または背景画像がスタックオーバーフローを引き起こすことで、任意のコード実行が可能であることが証明されています。この問題は、Windows Explorerが.skpファイル内の埋め込みサムネイルを読み取るときにも引き起こされる可能性があります。 Summary Title: Sketchup MAC Pict Material...

NPM: fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

NPM: fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values vulnerability discovered by ? in WordPress Npm fast-copy versions 2.2.0...

GHSA-JGGR-W7FW-PC2J fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

fast-copy: Stack exhaustion in fast-copy when copying deeply-nested values

Summary fast-copy traverses values recursively with no bound on depth. Copying a sufficiently deeply-nested value exhausts the JavaScript call stack and throws a native RangeError: Maximum call stack size exceeded from inside the library. Details Both copy and copyStrict recurse once per level of...

vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

Summary NodeVM exposes the host util module to the sandbox through an unfiltered shallow copy Object.assign, util. On Node.js = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack — absolute file paths, function...

NPM: vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

NPM: vm2: util.getCallSites bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack vulnerability discovered by ? in WordPress Npm vm2 versions = 3.11.7...

GHSA-R273-HXVJ-FXHP vm2: util.getCallSites() bypasses GHSA-v27g-jcqj-v8rw host-frame redaction, leaks host call stack

Summary NodeVM exposes the host util module to the sandbox through an unfiltered shallow copy Object.assign, util. On Node.js = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack — absolute file paths, function...

EUVD-2026-81586

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting...

GHSA-X6M4-CHR9-CG97 vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Summary Attacker-controlled code can trigger a host-realm syntax error and read its stack through the vm2 bridge. Host-realm stack formatting bypasses the sandbox-side redaction, so the returned value exposes absolute paths from vm2, Node.js internals, and the embedding application. Default VM an...

vm2 leaks absolute host filesystem paths to sandbox code via error stack formatting

Summary Attacker-controlled code can trigger a host-realm syntax error and read its stack through the vm2 bridge. Host-realm stack formatting bypasses the sandbox-side redaction, so the returned value exposes absolute paths from vm2, Node.js internals, and the embedding application. Default VM an...