EUVD-2026-92759

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash a...

CVE-2026-104030

A flaw was found in sssd. This vulnerability allows a local user to cause a Denial of Service DoS by submitting a specially crafted passkey authentication token that lacks null terminators. The authentication service reads past the end of the provided memory buffer, causing the process to crash a...

CVE-2026-59783

A flaw was found in Zabbix Server and Proxy. In deployments configured with a MySQL or MariaDB database backend, an authenticated remote attacker can cause a denial of service DoS by submitting binary items containing null bytes. This improper input handling causes the server or proxy process to...

Security Bulletin: IBM Security QRadar Log Management AQL Plugin contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. IBM Security QRadar Log Management AQL Plugin has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-76905 DESCRIPTION: kin-opena...

CVE-2025-47812-poC

CVE-2025-47812-poC Wing FTP Server RCE（CVE-2025-47812）の簡易エクスプロイト。コマンド実行とリバースシェルの取得が可能です。教育目的のみで使用してください。 脆弱性の詳細 本セキュリティ脆弱性はRCESecurity（https://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/）によって公開され、詳細が示されました。 このエクスプロイトは教育およびテスト目的で私が開発したものです。私は脆弱性の最初の発見者ではありません。 Win...

Security update for valkey

This update for valkey fixes the following issue: CVE-2026-92925: failure to properly validate string-carrying extensions for null-termination in the cluster bus packet parser can lead to an out-of-bounds read bsc1281417. Patch Instructions: To install this SUSE update use the SUSE recommended...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server リモートコード実行 RCE エクスプロイト CVE-2025-47812 📌 クレジット : 脆弱性は Julien @MrTuxracer によって発見されました。 この PoC 実装は彼らのオリジナル研究に基づいています。 このリポジトリは、Wing FTP Server のリモートコード実行 RCE 脆弱性 CVE-2025-47812 に対する Python エクスプロイトをホストしています。この重大な欠陥により、攻撃者は影響を受ける Wing FTP Server...

CVE-2026-90782-s2opc-status-clobber

CVE-2026-90782 — S2OPC 状态覆盖导致的 NULL 解引用 针对 S2OPC（Safe & Secure OPC）中 CVE-2026-90782 的独立概念验证。 漏洞 在 allocnotificationmessageitems 中（S2OPC 1.7.3 及更早版本）： 一个共享的 status 变量同时用于 DataChange 和 Event 的分配。 如果 DataChange 分配失败（返回 OOM / 非 OK），但随后的 Event 分配成功，status 会被覆盖为 SOPCSTATUSOK。 循环后的检查因此通过，代码解引用仍为 NULL 的...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: ipu3imggu: Fixed a NULL pointer dereferencing issue in active selection access. The IMGu driver handled this by first acquiring the pointers to the active devices, then attempting to use V4L2 subdev functions. Only after...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: net/sched: clsflow: fix NULL pointer dereference on shared blocks The flowchange function calls tcfblockq, and dereferences q-handle to derive a default baseclass. Shared blocks leave block-q NULL, causing a NULL dereference when...

Astra Linux – Vulnerability in Linux 5.10, Linux

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: A NULL pointer dereference occurred in amdgpudmconnectoraddcommonmodes. In amdgpudmconnectoraddcommonmodes, amdgpudmcreatecommonmode assigns mode to mode, and mode is directly passed to drmmodeprobedadd...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: bpf: devmap: provide rxq after redirect The rxq structure contains a pointer to the device from which the redirect occurred. Currently, the BPF program that is executed after a redirect via BPFMAPTYPEDEVMAP does not set this...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ocfs2: Prevent the release of journal inode after journal shutdown Before calling ocfs2deleteosb, the function ocfs2journalshutdown has already been executed in ocfs2dismountvolume. Therefore, osb-journal must be NULL. As a resul...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: added a NULL check at the beginning of dcvalidatestream. Reason To prevent invalid memory access. How Check whether dc and stream are NULL...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btintel: Fixed a null pointer dereference in btintelreadversion. If hcicmdsyncComplete is triggered and skb is NULL, then hdev-reqskb will also be NULL, which will cause this issue...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: drm/tegra: Fixed a possible null pointer derefrence issue. In tegracrtcreset, new memory is allocated using kzalloc, but no checks are performed. Before calling drmatomichelpercrtcreset, the state of the memory allocation should ...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: ASoC: stm32: spdifrx: fixed the issue of releasing the DMA channel in stm32spdifrxRemove. In case of an error when requesting the ctrlchan DMA channel, the pointer to ctrlchan is not null. Therefore, releasing the DMA channel lea...

Astra Linux – Vulnerability in OpenCV

A issue was discovered in OpenCV prior to version 4.1.1. There is a NULL pointer dereferencing in the function cv::XMLParser::parse, located in modules/core/src/persistence.cpp...

Astra Linux – Vulnerability in Redis

Valkey is a distributed key-value database. Prior to versions 9.0.2, 8.1.6, 8.0.7, and 7.2.12, a malicious user could use scripting commands to inject arbitrary information into the response stream for a given client, potentially corrupting or returning tampered data to other users on the same...

Astra Linux – Vulnerability in Harfbuzz

HarfBuzz is a text shaping engine. Prior to version 12.3.0, there was a null pointer dereference vulnerability in the SubtableUnicodesCache::create function located in src/hb-ot-cmap-table.hh. The function fails to check whether hbmalloc returns NULL before using placement new to construct an...