186055 matches found
librsvg: Use-after-free when XML includes have duplicated entities
A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions Xincludes with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that is still in use by the parser. An attack...
EUVD-2026-107182
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
CVE-2026-74758
Apache bRPC (versions
CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
CVE-2026-74758 Apache bRPC: Heap Use-After-Free in RTMP Abort Message Handling
A heap use-after-free in the RTMP protocol component of Apache bRPC versions 1.18.0 allows a remote attacker to crash a bRPC RTMP server by sending a crafted Abort control message. No authentication or application-level request is required. Root Cause: When an RTMP Abort control message names the...
Exploit for CVE-2026-109618
php2shell-verify Independent verification lab and proof-of-co...
CLSA-2026-1788168285 kernel: Fix of 193 CVEs
mac802154: llsec: reject frames shorter than the authentication tag CVE-2026-68125 - KVM: x86/mmu: Fix use-after-free on vendor module reload CVE-2026-68428 - wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper CVE-2026-68197 - bpf: account for current allocated stack depth...
Exploit for CVE-2026-109618
Mitigação temporária: desabilitar session.uploadprogress no...
Exploit for CVE-2026-109618
CVE-2026-109618 / CVE-2026-109619 — PHP2Shell PoC Critica...
CLSA-2026-1791800936 kernel: Fix of 191 CVEs
drm/amdgpu/vcn: fix integer overflow in decmsg buffer count check CVE-2026-89818 - drm/amdgpu/vcn4: Avoid overflow on msg bound check CVE-2026-46199 - drm/amdgpu/vcn4: Prevent OOB reads when parsing dec msg CVE-2026-46199 - drm/amdgpu/vcn3: Avoid overflow on msg bound check CVE-2026-46230 -...
Security update for libpng16
This update for libpng16 fixes the following issues: CVE-2026-46675: Use-after-free of zlib input in pngreadend after incomplete zTXt, iTXt or iCCP decompression bsc1283183. Changes for libpng16: version update to 1.6.59 jscPED-16190: Fixed a regression introduced in version 1.6.47 that caused...
php-unserialize-uaf-rce
PHP Serializable varhash UAF → RCE Reproduced + Adapted Vers...
Exploit for CVE-2026-109618
CVE-2026-109618 / CVE-2026-109619 PHP session.uploadprogr...
CLSA-2026-1791858923 Fix of 174 CVEs
CVE-2026-90205 - ocfs2: validate orphan slot during inode read CVE-2026-90205 CVE-2026-93054 - uio: Fix stale info pointer in failed registration path CVE-2026-93054 CVE-2026-93103 - RDMA/hfi1: Preserve unit 0 on allocation failure CVE-2026-93103 CVE-2026-89833 - f2fs: fix to avoid potential...
CLSA-2025-1760713752 Fix of 19 CVEs
Ubuntu: 4.15.0-252.263 CVE-url: https://ubuntu.com/security/CVE-2022-43945 - NFSD: Protect against send buffer overflow in NFSv3 READ Focal update: v5.4.285 upstream stable release LP: 2089233 // CVE-2024-49924 // CVE-url: https://ubuntu.com/security/CVE-2024-49924 - fbdev: pxafb: Fix possible us...
CLSA-2025-1749571039 Fix of 13 CVEs
Ubuntu: 4.15.0-248.259 CVE-url: https://ubuntu.com/security/CVE-2025-21811 - nilfs2: protect access to buffers with no active references CVE-url: https://ubuntu.com/security/CVE-2025-21715 - net: davicom: fix UAF in dm9000drvremove CVE-url: https://ubuntu.com/security/CVE-2024-58083 - KVM:...
Important: Red Hat Security Advisory: flatpak-builder security update
An update for flatpak-builder is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
flatpak-builder: Host code execution via `git am` hook execution in patch source extraction (`use-git-am`)
A flaw was found in flatpak-builder where Git hooks are not disabled when applying patch sources with use-git-am: true. An attacker who can provide a malicious source containing a Git post-applypatch hook can cause the hook to execute on the host during the build process, resulting in arbitrary...
CLSA-2025-1747431461 Fix of 39 CVEs
Ubuntu: 4.15.0-247.258 CVE-url: https://ubuntu.com/security/CVE-2021-47352 - virtio-net: Add validation for used length CVE-url: https://ubuntu.com/security/CVE-2024-46745 - Input: uinput - reject requests with unreasonable number of slots CVE-url: https://ubuntu.com/security/CVE-2024-44952 -...
CLSA-2026-1772815097 Fix of 104 CVEs
CVE-2025-38699 - scsi: bfa: Double-free fix CVE-2025-38699 CVE-2025-38697 - jfs: upper bound check of tree index in dbAllocAG CVE-2025-38697 CVE-2025-39823 - KVM: x86: use arrayindexnospec with indices that come from guest CVE-2025-39823 CVE-2025-39689 - ftrace: Also allocate and copy hash for...