Security Bulletin: This Power System update is being released to address CVE-2026-19234

Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...

Security Bulletin: This Power System update is being released to address CVE-2026-17494

Summary Power Systems Firmware is affected by a vulnerability in the interface between the BMC and the host system. An attacker with service access to the BMC can send a specially crafted command, allowing arbitrary code to be executed on the host system, giving full control over the host system...

DIR8xx_PoC

phpcgi phpcgi è responsabile dell'elaborazione delle richieste verso le pagine .php, .asp e .txt. Inoltre, verifica se un utente è autorizzato o meno. Tuttavia, se una richiesta viene costruita in modo appropriato, un attaccante può facilmente bypassare l'autorizzazione ed eseguire uno script che...

Security Bulletin: Vulnerabilities in IBM AIX and PowerVM VIOS

Summary Updated Aug 21, 2026: Updated the summary to highlight the additional installation instructions. IBM is providing security updates for supported AIX and VIOS releases that are under active fix support. Delivered through Service Packs SPs and Fix Packs FPs, these updates remediate...

CVE-2026-68553

A flaw was found in Coturn. An authenticated TURN user can exploit a format string vulnerability by injecting printf-style format specifiers into the STUN USERNAME or REALM attribute. This can lead to a crash of the coturn process, resulting in a Denial of Service DoS and termination of active TU...

CVE-2026-74576

A flaw was found in the Linux kernel's memory management. This vulnerability allows for unbounded recursion in the slab free path, a process where the kernel manages and releases small blocks of memory. When certain kernel memory allocation caches kmalloc caches form a cycle during internal data...

CVE-2026-74550

A flaw was found in the kernel. When the network stack fails to allocate a peer entry, it can send un-rate-limited Internet Control Message Protocol ICMP or Neighbor Discovery NDISC Redirect messages. This can be exploited by a remote attacker to cause an uncontrolled flood of network traffic,...

EUVD-2026-63691

Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network...

EUVD-2026-63742

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow...

EUVD-2026-63752

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 A stack memory corruption vulnerability exists in the AIX IPsec ESP decapsulation handler. Successful exploitation may corrupt kernel stack state and cause a system crash, resulting in denial of service...

EUVD-2026-63725

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote authenticated attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-63736

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to cause a denial of service due to a stack buffer overflow...

EUVD-2026-63714

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-63710

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-63720

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to execute arbitrary code due to a stack buffer overflow...

EUVD-2026-63676

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

EUVD-2026-63678

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to execute arbitrary code due to a stack-based buffer overflow...

Linux Distros Unpatched Vulnerability : CVE-2026-63387

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Libevent is an event notification library. Prior to 2.1.13 and 2.2.2-alpha, libevent has an off-by-one stack buffer overflow in evdns.c when dnsnametolabels...

openSUSE 16 Security Update : go1.25 (openSUSE-SU-2026:21592-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21592-1 advisory. Update to go1.25.13 released 2026-08-13, bsc1244485. Security issues fixed: - CVE-2026-33818: encoding/asn1: unenforced recursion limit can lead...

PT-2026-79405

Name of the Vulnerable Software and Affected Versions TL-MR6400 version v7 Description A stack-based buffer overflow occurs in the firmware update functionality due to the unsafe processing of attacker-controlled metadata within a firmware image. An authenticated attacker can exploit this to...