Astra Linux – Vulnerability in Chromium

In Blink, the "Out of bounds read and write" vulnerability in InterestGroups in Google Chrome before version 149.0.7827.197 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...

Astra Linux – Vulnerability in libfastjson

JSON-C version 0.14 has an integer overflow issue, and there is a risk of out-of-bounds write operations through a large JSON file, as demonstrated by the printbufmemappend function...

Astra Linux – Vulnerability in Cairo

A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...

Astra Linux – Vulnerability in dcmtk

There is an improper array index validation vulnerability in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to exploit this vulnerability...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: fix OOB write in sndusbmidius122loutput The sndusbmidius122loutput function selects a count of 2 whenever the transfer speed is slower than high speed. It never relates this count to ep-maxtransfer. The URB buffe...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: USB: serial: digiacceleport: fix write buffer corruption The digiwriteinbcommand function is supposed to wait for the write buffer to become available or return an error. However, instead, it updates the transfer buffer and...

CVE-2026-5027

هذا المنشور عبارة عن مقال بحثي نُشر بواسطة EQSTLab. شكرًا لـYahia Hamza، الذي أبلغ عن هذه الثغرة الأمنية وقام بتحليلها. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ الوصف CVE-2026-5027 : ثغرة الكتابة التعسفية للملفات في Langflow الوصف: تسمح ثغرة اجتياز المسار...

CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63266

LibreOffice Calc is vulnerable to an arbitrary file write due to how it handles external data source links. An attacker can use a document to open an embedded Firebird database , which may write files to any location the user has permissions to access. The vulnerability is caused by a lack of dir...

CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

EUVD-2026-92417

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

Security update for pcre2

This update for pcre2 fixes the following issues: CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. CVE-2026-89157: out-of-bounds write via large pattern...

SUSE-SU-2026:4458-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

Codiad-CVE-2018-14009

codiad स्थापित करें @ git clone https://github.com/Codiad/Codiad.git पुनरुत्पादन के चरण 1. Codiad 2.8.4 नवीनतम संस्करण के साथ ubuntu सर्वर पर एक संवेदनशील वातावरण स्थापित करें @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git clone...

CVE-2026-31802

🛡️ CVE-2026-31802 - عارض إثبات المفهوم البسيط 📋 حول CVE-2026-31802 يوفر هذا المستودع إثبات مفهوم PoC وتقريرًا عن CVE-2026-31802. المشكلة هي ثغرة أمنية في حزمة npm tar. تسمح للمهاجمين بخداع البرنامج لكتابة ملفات خارج المجلد المسموح به عن طريق إساءة استخدام الروابط الرمزية واجتياز المسار. يمكن أن...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 Python के tarfile मॉड्यूल में एक कमजोरी है जो अविश्वसनीय tar संग्रह को निकालते समय निष्कर्षण निर्देशिका के बाहर मनमानी फ़ाइल लेखन की अनुमति देती है। यह समस्या तब उत्पन्न होती है जब filter="data" या filter="tar" के साथ TarFile.extract या TarFile.extractall का उपयोग...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 और CVE-2025-71260 BMC FootPrints पूर्व-प्रमाणीकृत रिमोट कोड निष्पादन श्रृंखला BMC FootPrints पूर्व-प्रमाणीकृत रिमोट कोड निष्पादन श्रृंखला पहचान कलाकृति जनरेटर उपकरण विवरण यह डिटेक्शन आर्टिफैक्ट जनरेटर जांचता है कि क्या BMC FootPrints इंस्टेंस CVE-2025-71257 और CVE-2025-71260 के प्र...

varlib-cve-2025-66034

استغلال CVE-2025-66034 في fontTools varLib هذا المستودع لا يقدّم ثغرة أمنية جديدة. هذا إثبات مفهوم Proof-of-concept لاستغلال CVE-2025-66034 الذي يؤثر على خط إنتاج الخطوط المتغيرة varLib في fontTools. تسمح الثغرة للمهاجمين بالتحكم في اسم ملف الإخراج داخل ملف .designspace مُعدّ بعناية. عند معالجته...