⤷ Title: Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 04:37:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #EAP_MSCHAPv2 #Heap Buffer Overflow #Integer Underflow #rce #strongSwan #VPN Client
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 29 Oct 2025 04:37:28 +0000
════════════════════════
⌗ Tags: #Vulnerability #EAP_MSCHAPv2 #Heap Buffer Overflow #Integer Underflow #rce #strongSwan #VPN Client
Daily CyberSecurity
Critical strongSwan Heap Overflow in EAP-MSCHAPv2 Plugin Allows Remote Code Execution
A Critical Heap Overflow in strongSwan's EAP-MSCHAPv2 plugin allows Remote Code Execution on the client. An integer underflow in Failure Request packet processing causes memory corruption.
⤷ Title: High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 00:45:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_13654 #Disk Usage #dos #Duc #Information Disclosure #Integer Underflow #Linux
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 00:45:53 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #buffer overflow #CVE_2025_13654 #Disk Usage #dos #Duc #Information Disclosure #Integer Underflow #Linux
Daily CyberSecurity
High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
A High-severity flaw (CVE-2025-13654) in the Duc disk usage tool risks DoS and information leaks. An integer underflow in buffer.c allows out-of-bounds memory read. Update to v1.4.6 immediately.
⤷ Title: ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:05:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #32_bit #Arbitrary Memory Disclosure #CVE_2025_66628 #ImageMagick #integer overflow #open_source #PSX TIM
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 15 Dec 2025 00:05:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #32_bit #Arbitrary Memory Disclosure #CVE_2025_66628 #ImageMagick #integer overflow #open_source #PSX TIM
Daily CyberSecurity
ImageMagick Flaw Risks Arbitrary Memory Disclosure via PSX TIM File Integer Overflow on 32-bit Systems
A High-severity (CVSS 7.5) flaw in ImageMagick's PSX TIM parser allows Arbitrary Memory Disclosure on 32-bit systems via an integer overflow. Patch immediately to v7.1.2-10.
⤷ Title: The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 29 Dec 2025 01:53:21 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apple #Gigacage #integer overflow #iOS 26.2 #iPhone security #JavaScriptCore #Joseph Goydish #PoC #rce #Remote Code Execution #Safari #Vulnerability #WebKit
Daily CyberSecurity
The iOS 26.2 Trap: New WebKit Integer Overflow Discovered with PoC—Is Your iPhone at Risk?
Joseph Goydish uncovers a critical integer overflow in iOS 26.2’s WebKit. Proof of Concept shows how attackers can crash browsers or trigger RCE.
⤷ Title: The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:05:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 04:05:04 +0000
════════════════════════
⌗ Tags: #Vulnerability #Blockchain Security #DeFi Hack 2026 #Ethereum #Halborn #Integer Overflow #SlowMist #Smart Contract Exploit #Tornado Cash #TRU Token #Truebit Protocol
Penetration Testing Tools
The Minting Glitch: How a 5-Year-Old Bug Cost Truebit $26 Million
In early January 2026, a sophisticated adversary identified a critical vulnerability within the purchase and minting contract of
⤷ Title: Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:01:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 19 Jan 2026 00:01:47 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #ASLR Bypass #CVE_2026_0861 #CVE_2026_0915 #glibc #GNU C Library #heap corruption #infosec #integer overflow #Linux Security #Memory Leak
Daily CyberSecurity
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed
The maintainers of the GNU C Library (glibc), the core library that underpins the vast majority of Linux-based systems, have disclosed details on two security vulnerabilities ranging from high-sev…
⤷ Title: HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 16 Feb 2026 00:11:53 +0000
════════════════════════
⌗ Tags: #Vulnerability #ALOHA #Denial of Service #DevOps #HAProxy #Integer Underflow #load balancer #Patch Alert #QUIC Protocol
Daily CyberSecurity
HAProxy Patches High-Severity QUIC Flaws That Can Kill the Load Balancer
HAProxy patches high-severity QUIC flaws CVE-2026-26080 & 26081. Remote attackers can crash servers via malformed packets. Update to v3.0.16 now.
⤷ Title: Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 13:52:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Update #CVE_2026_2648 #CVE_2026_2649 #CVE_2026_2650 #Cyber Security #google chrome #Heap Buffer Overflow #integer overflow #Patch Alert #PDFium #V8 Engine
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 19 Feb 2026 13:52:51 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Chrome Update #CVE_2026_2648 #CVE_2026_2649 #CVE_2026_2650 #Cyber Security #google chrome #Heap Buffer Overflow #integer overflow #Patch Alert #PDFium #V8 Engine
Daily CyberSecurity
Urgent Chrome Patch: Google Fixes High-Severity PDF and V8 Engine Flaws
Google releases an urgent Chrome update to patch high-severity flaws in PDFium (CVE-2026-2648) and the V8 engine (CVE-2026-2649). Update to 145 now.
⤷ Title: Integer Overflow Flaw in Apache ActiveMQ Exposes MQTT Brokers to DoS
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 08:31:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2025_66168 #cybersecurity #dos attack #infosec #integer overflow #IoT security #MQTT Protocol #Patch Alert #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 05 Mar 2026 08:31:19 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Apache ActiveMQ #CVE_2025_66168 #cybersecurity #dos attack #infosec #integer overflow #IoT security #MQTT Protocol #Patch Alert #Vulnerability
Daily CyberSecurity
Integer Overflow Flaw in Apache ActiveMQ Exposes MQTT Brokers to DoS
An integer overflow flaw (CVE-2025-66168) in Apache ActiveMQ's MQTT module allows authenticated attackers to crash brokers. Update your systems immediately.
⤷ Title: The MuPDF Vulnerability Turning “Safe” PDFs into System Hijackers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 12:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Artifex #CVE_2026_3308 #heap overflow #infosec #integer overflow #Linux Security #Memory Management #MuPDF #PDF Security #rce #Vulnerability
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 03 Apr 2026 12:00:29 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Artifex #CVE_2026_3308 #heap overflow #infosec #integer overflow #Linux Security #Memory Management #MuPDF #PDF Security #rce #Vulnerability
Daily CyberSecurity
The MuPDF Vulnerability Turning "Safe" PDFs into System Hijackers
Artifex MuPDF faces a 7.8 CVSS integer overflow (CVE-2026-3308) allowing RCE via "crafted" PDFs. With no official patch, sandboxing is vital. Update now.