Astra Linux – Vulnerability in openexr

OpenEXR provides the specification and reference implementation of the EXR file format, a image storage format for the motion picture industry. In versions 3.0.0 to before 3.2.9, 3.3.0 to before 3.3.11, and 3.4.0 to before 3.4.11, there was an integer overflow in ImageChannel::resize, which led t...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: virtio-net: Fixed the length checking in receivebig. receivebig limits the device-announced length by bigpacketsnumskbfrags + 1 PAGESIZE. This limit is still too loose. addrecvbufbig sets sg1 to start at offset sizeofstruct...

Astra Linux – Vulnerability in dcmtk

There is an improper array index validation vulnerability in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to exploit this vulnerability...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: The bound NTFSDEdeview.dataoff was bound in UpdateRecordDataRoot,Allocation. In the UpdateRecordDataRoot fslog.c:3489 and UpdateRecordDataAllocation fslog.c:3697 functions, the destination of the memmove operation is...

CVE-2026-5027

هذا المنشور عبارة عن مقال بحثي نُشر بواسطة EQSTLab. شكرًا لـYahia Hamza، الذي أبلغ عن هذه الثغرة الأمنية وقام بتحليلها. CVE-2026-5027 ★ CVE-2026-5027 Langflow Path Traversal / Arbitrary File Write PoC ★ الوصف CVE-2026-5027 : ثغرة الكتابة التعسفية للملفات في Langflow الوصف: تسمح ثغرة اجتياز المسار...

CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63266

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

CVE-2026-63266

LibreOffice Calc is vulnerable to an arbitrary file write due to how it handles external data source links. An attacker can use a document to open an embedded Firebird database , which may write files to any location the user has permissions to access. The vulnerability is caused by a lack of dir...

CVE-2026-63266 Arbitrary file write via calcext:data-mappings, sql provider and Firebird backup functionality

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

EUVD-2026-92417

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...

kernel: ipvs: clear IPv4 options after rebasing tunnel ICMP errors

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. When processing Internet Control Message Protocol ICMP errors for tunneled packets, the system can incorrectly use a stale IPv4 option offset. A remote attacker could exploit this by sending a specially crafted ICMP packet,...

Security update for pcre2

This update for pcre2 fixes the following issues: CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. CVE-2026-89157: out-of-bounds write via large pattern...

SUSE-SU-2026:4458-1 Security update for pcre2

This update for pcre2 fixes the following issues: - CVE-2026-86145: missing size checks in pcre2dfamatch code can lead to an out-of-bounds write bsc1279893. - CVE-2026-89156: out-of-bounds read via invalid UTF data during JIT fallback bsc1280054. - CVE-2026-89157: out-of-bounds write via large...

Codiad-CVE-2018-14009

codiad स्थापित करें @ git clone https://github.com/Codiad/Codiad.git पुनरुत्पादन के चरण 1. Codiad 2.8.4 नवीनतम संस्करण के साथ ubuntu सर्वर पर एक संवेदनशील वातावरण स्थापित करें @ chmod o+w config.php @ chmod o+w workspace @ chmod o+w plugins @ chmod o+w themes @ chmod o+w data 2. @ git clone...

CVE-2026-31802

🛡️ CVE-2026-31802 - عارض إثبات المفهوم البسيط 📋 حول CVE-2026-31802 يوفر هذا المستودع إثبات مفهوم PoC وتقريرًا عن CVE-2026-31802. المشكلة هي ثغرة أمنية في حزمة npm tar. تسمح للمهاجمين بخداع البرنامج لكتابة ملفات خارج المجلد المسموح به عن طريق إساءة استخدام الروابط الرمزية واجتياز المسار. يمكن أن...

CVE-2025-4517-PoC

CVE-2025-4517-PoC CVE-2025-4517 Python के tarfile मॉड्यूल में एक कमजोरी है जो अविश्वसनीय tar संग्रह को निकालते समय निष्कर्षण निर्देशिका के बाहर मनमानी फ़ाइल लेखन की अनुमति देती है। यह समस्या तब उत्पन्न होती है जब filter="data" या filter="tar" के साथ TarFile.extract या TarFile.extractall का उपयोग...

watchTowr-vs-BMC-Footprints-RCE-CVE-2025-71257-CVE-2025-71260

CVE-2025-71257 और CVE-2025-71260 BMC FootPrints पूर्व-प्रमाणीकृत रिमोट कोड निष्पादन श्रृंखला BMC FootPrints पूर्व-प्रमाणीकृत रिमोट कोड निष्पादन श्रृंखला पहचान कलाकृति जनरेटर उपकरण विवरण यह डिटेक्शन आर्टिफैक्ट जनरेटर जांचता है कि क्या BMC FootPrints इंस्टेंस CVE-2025-71257 और CVE-2025-71260 के प्र...

varlib-cve-2025-66034

استغلال CVE-2025-66034 في fontTools varLib هذا المستودع لا يقدّم ثغرة أمنية جديدة. هذا إثبات مفهوم Proof-of-concept لاستغلال CVE-2025-66034 الذي يؤثر على خط إنتاج الخطوط المتغيرة varLib في fontTools. تسمح الثغرة للمهاجمين بالتحكم في اسم ملف الإخراج داخل ملف .designspace مُعدّ بعناية. عند معالجته...

CVE-2026-19185

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

CVE-2026-103511

Perforce P4 Search prior to 2026.4.2 does not validate file names supplied to its extension installation feature. An attacker with super-user or service-token privileges can write files with arbitrary content to the P4 Search installation directory...