Aggregator

Submit #850580 / VDB-376351

NASA 漫游车在火星上发现的有机碳绝大多数都是在岩石的内部，需要通过钻或磨才能暴露。如今火星漫游车毅力号在河道 Neretva Vallis 附近的岩石表面发现了复杂大分子碳，这是至今在火星上发现的最浅的有机物。如果地球上发现类似的大量大分子碳，通常表明它们来自生物。但对于火星岩石上发现的大量碳，则难以识别其来源，除非将其带到地球进行仔细研究。研究人员表示这些分子碳也可能源于非生物过程。它们是否是古代火星生命的遗迹，还有待未来回答。

A vulnerability, which was classified as problematic, has been found in radareorg radare2 up to 6.1.6. The affected element is the function r_str_ndup/r_str_append of the file libr/util/str.c. The manipulation leads to integer overflow. This vulnerability is traded as CVE-2026-14761. An attack has to be approached locally. Furthermore, there is an exploit available. Applying a patch is the recommended action to fix this issue.

A vulnerability classified as problematic was found in radareorg radare2 up to 6.1.6. Impacted is the function r_core_seek_arch_bits of the file libr/core/disasm.c of the component regprofile Handler. Executing a manipulation can lead to use after free. This vulnerability appears as CVE-2026-14760. The attack requires local access. In addition, an exploit is available. It is advisable to implement a patch to correct this issue.

A vulnerability classified as problematic has been found in radareorg radare2 up to 6.1.6. This issue affects the function r_bin_java_inner_classes_attr_calc_size of the file shlr/java/class.c of the component RBinJava Line Number Table Parser. Performing a manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2026-14759. The attack requires a local approach. Moreover, an exploit is present. To fix this issue, it is recommended to deploy a patch.

A vulnerability described as problematic has been identified in radareorg radare2 up to 6.1.6. This vulnerability affects the function cmd_anal_opcode of the file libr/core/cmd_anal.inc.c of the component hexpairs Parser. Such manipulation leads to integer overflow. This vulnerability is documented as CVE-2026-14758. The attack needs to be performed locally. Additionally, an exploit exists. A patch should be applied to remediate this issue.

A vulnerability marked as critical has been reported in radareorg radare2 up to 6.1.6. This affects the function core_anal_bytes of the file libr/core/cmd_anal.inc. This manipulation causes integer overflow. This vulnerability is registered as CVE-2026-14757. The attack needs to be launched locally. Furthermore, an exploit is available. It is suggested to install a patch to address this issue.

Submit #850454 / VDB-277436

Submit #850385 / VDB-376350

Submit #850384 / VDB-376349

Submit #850383 / VDB-376348

Submit #850382 / VDB-376347

Submit #850381 / VDB-376346

Currently trending CVE - Hype Score: 1 - A misconfiguration in lmadmin.exe of FlexNet Publisher versions prior to 2024 R1 (11.19.6.0) allows the OpenSSL configuration file to load from a non-existent directory. An unauthorized, locally authenticated user with low privileges can potentially create the directory and load ...

Currently trending CVE - Hype Score: 1 - Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.

Currently trending CVE - Hype Score: 9 - Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Currently trending CVE - Hype Score: 19 - A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time ...

A vulnerability labeled as critical has been found in code-projects Hotel and Tourism Reservation 1.0. Affected by this issue is some unknown functionality of the file /admin/add_tour.php of the component Tour Management Page. The manipulation of the argument delete_image results in sql injection. This vulnerability is cataloged as CVE-2026-14756. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability identified as critical has been detected in code-projects Hotel and Tourism Reservation 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/reservations.php of the component Reservations Management Page. The manipulation of the argument delete leads to sql injection. This vulnerability is listed as CVE-2026-14755. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of the argument delete_image/edit/description/number/price/rooms/type can lead to sql injection. This vulnerability is tracked as CVE-2026-14754. The attack can be launched remotely. Moreover, an exploit is present.