CVE-2026-68765

A flaw was found in hashcat. Attackers can exploit a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module by providing an oversized ninth hash field token. The module processes input up to 600 hexadecimal characters into a fixed 256-byte buffer without proper length validation...

EUVD-2026-64852

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied...

MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting

paintballrefjosh/MaNGOSWebV4 4.0.8 contains a reflected XSS caused by unsanitized input in install/index.php step parameter, letting attackers execute arbitrary scripts in the victim's browser, exploit requires victim to visit a maliciously crafted URL id: CVE-2017-6478 info: name: MaNGOSWebV4...

Linux Distros Unpatched Vulnerability : CVE-2026-72428

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written...

CVE-2026-68765

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

UBUNTU-CVE-2026-68765

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765 hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765 hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

EUVD-2026-60455

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765 hashcat KeePass KDBX v4 Module Heap Buffer Overflow via Token Field

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765

hashcat master branch builds after v7.1.2 contain a heap buffer overflow vulnerability in the KeePass AESKDF/KDBX v4 module module 34301 that allows attackers to corrupt adjacent heap memory by supplying an oversized ninth hash field token. The module accepts up to 600 hex characters for the nint...

CVE-2026-68765

hashcat master builds after v7.1.2 have a heap buffer overflow in module 34301 (KeePass AESKDF/KDBX v4): the ninth token field accepts 600 hex chars but decodes into a fixed 256-byte buffer without length checks, writing up to 44 bytes past the boundary into adjacent esalt fields and heap metadat...

PT-2026-76796

Name of the Vulnerable Software and Affected Versions hashcat versions after 7.1.2 Description A heap buffer overflow exists in the KeePass AESKDF/KDBX v4 module module 34301. The issue occurs when the module processes the ninth hash field token; while it accepts up to 600 hex characters, it...

CVE-2026-72428

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

UBUNTU-CVE-2026-72428

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

EUVD-2026-59327

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

CVE-2026-72428 bpf: Fix stack slot index in nospec checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...

CVE-2026-72428

Summary: This CVE concerns the Linux kernel’s BPF Spectre v4 sanitization logic. The root cause is in check_stack_write_fixed_off(), which computes the byte slot incorrectly (-off - 1) and records writes in slot_type[] using (slot - i) % BPF_REG_SIZE. The sanitization pre-check used slot_type[i],...

CVE-2026-72428 bpf: Fix stack slot index in nospec checks

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks checkstackwritefixedoff computes the byte slot for a fixed-offset stack write as -off - 1, and records each written byte in slottype with slot - i % BPFREGSIZE. The Spectre v4 sanitizati...