Search: 7.3.1.1

A critical path traversal vulnerability exists in Oray Pugongying X5 Pro firmware up to version 7.6.1. The flaw is in the config_restore_ex function of the /etc/openwrt_release file, allowing remote attackers with high privileges to manipulate file paths. Exploit code is publicly available, but the vendor has not responded or provided a fix.

A vulnerability was identified in Oray Pugongying X5 Pro up to 7.6.1. This impacts the function session_get of the file session.lua of the component Session ID Handler. The manipulation of the argument _user leads to insufficiently random values. The attack can be initiated remotely. The attack's complexity is rated as high. The exploitability is said to be difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVE-2026-120217 is a medium-severity vulnerability in Delgan loguru version 0.7.3. It involves inefficient regular expression complexity in the AnsiParser.feed function of the ANSI Color-Markup Parser component. This flaw can be exploited remotely and public exploit code is available. The vendor has not responded to the disclosure and no patch information is provided.

CVE-2026-119601 is a heap out-of-bounds write vulnerability in AFFLIB version 3.0, specifically in the af_get_page function. This type of flaw can lead to memory corruption, potentially causing crashes or enabling further exploitation. No CVSS score or detailed impact information is provided.

XS::libbrotli versions before 1.2.1.0 for Perl include a bundled brotli library with an out-of-bounds write vulnerability in the decoder. This flaw can be triggered by an attacker supplying a crafted brotli stream to any dependent module that decompresses untrusted data, potentially leading to memory corruption, information disclosure, process crashes, or arbitrary code execution. The vulnerability arises because the bundled brotli versions 1.0.7 or 1.1.0 contain the decoder flaw described in CVE-2026-111497. Upgrading the system brotli library does not mitigate this issue; only upgrading XS::libbrotli to version 1.2.1.0, which updates the bundled brotli to 1.2.1, resolves the vulnerability.

AJ-Report versions through 1.7.1 use a hard-coded JWT secret to sign share tokens. This allows attackers to forge valid share tokens offline. By crafting a token with the reportCode 'dataSet', attackers can access the testTransform endpoint, which executes scripts via GroovyClassLoader without authentication, leading to remote code execution.

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.22 addresses multiple security vulnerabilities affecting various kernel components such as crypto, IPv6, netfs, xfrm, ASoC SOF, SCTP, IPVS, SUNRPC, NFS, and IPv4. The update fixes issues including heap overflow, infinite loops, buffer overruns, and memory handling errors.

This security update for the SUSE Linux Enterprise Kernel 6.4.0-150700.7.75 addresses multiple security vulnerabilities including issues in SCTP, SUNRPC, NFS daemon, and IPv4 components. The fixes prevent potential overflow, error path bugs, buffer underflow, incorrect length calculations, and improper resource freeing after RCU grace periods.

A denial of service vulnerability exists in pyasn1 versions 0.6.4 and earlier used by smbclient-ng (>=3.1.0). The flaw causes quadratic-time CPU consumption when decoding constructed OCTET STRINGs or indefinite-length ANY types composed of many fragments, leading to CPU exhaustion. This affects BER and CER decoding paths and certain non-conforming DER inputs. No confidentiality or integrity impact is reported. The CVSS v3.1 base score is 7.5 (high severity).

CVE-2026-119194 describes a vulnerability in pyasn1 library used by Scoutsuite where decoding attacker-controlled schemaless BER, CER, or DER data with many distinct long tag IDs causes quadratic CPU usage. This can lead to excessive CPU consumption and reduced service availability. The issue arises from the decoder's handling of TagSet insertions, which grows inefficiently with crafted inputs. No confidentiality or integrity impacts were observed. The vulnerability affects Scoutsuite versions >=5.13.0 and has a CVSS score of 7.5 (high severity).

The joserfc library's decrypt_json() function for JWE General JSON Serialization does not limit the number of recipients in the 'recipients' array. This allows an attacker to craft a JWE with an unbounded number of recipients, causing the library to perform a costly RSA private-key decryption operation for each recipient. This results in a CPU exhaustion denial-of-service (DoS) vulnerability with a high severity score (CVSS 7.5). The library's existing mitigation option verify_all_recipients=False does not reduce CPU usage, as all recipients are decrypted before this flag is checked. A fix is available in version 5.2.3_1.

CVE-2026-119196 affects pyasn1 through version 0.6.4, where decoding constructed BIT STRING values with many fragments causes quadratic CPU consumption due to repeated shifting and copying of accumulated data. This can lead to CPU exhaustion and denial of service if attacker-controlled ASN.1 data with many fragments is decoded. The vulnerability impacts BER and CER decoders, and a permissive schema-driven DER decoder path. No confidentiality or integrity impact is reported. The CVSS v3.1 base score is 7.5 (high severity).

Mojolicious versions 7.28 through 9.45 for Perl generate weak HMAC session cookie secrets by default when using the "mojo generate app" tool. This occurs because the tool uses the insecure rand() function to create the secret, which is used for session authentication and integrity. The weakness may allow attackers to brute force session keys. Version 9.46 fixes this by using high-quality randomness. Users must manually replace any previously generated weak secrets to ensure security.