CVE-2025-3102

🔐 CVE-2025-3102 – WordPressプラグインSureTriggersの認証バイパス 🚨 CVE-2025-3102 は、100,000以上のWebサイト でアクティブにインストールされているWordPressプラグイン SureTriggers: All-in-One Automation Platform に影響する深刻な認証バイパス脆弱性です。この欠陥の性質と展開規模の大きさにより、本脆弱性は重大なセキュリティリスクをもたらします。 🧠 脆弱性の概要 CVE ID : CVE-2025-3102 影響を受けるプラグイン : SureTriggers –...

PoC-CVE-2025-69420

CVE-2025-69420 — OpenSSL TimeStamp Response 型混乱 PoC OpenSSL における CVE-2025-69420 のクラッシュ専用実験室再現器。PoC は有効な RFC 3161 TimeStamp Response を読み込み、署名済み ESS 属性をメモリ上で VASN1SEQUENCE から VASN1NULL に変更し、TSRESPverifyresponse を呼び出します。 影響を受けるビルドでは、osslessgetsigningcertv2 または osslessgetsigningcert が、アクティブな型を検証せずに...

tpwn

tpwn cve-2015-???? PoC os x 10.10.5 カーネルローカル特権昇格 この脆弱性は 10.11 で潰された 完全な writeup は etason hax してくれた unthreadedjb に shout out tpwn やその他の NULL Pointer Deference バグから身を守るには NULLGuard をインストール...

OPENSUSE-SU-2026:22013-1 Security update for openexr

This update for openexr fixes the following issue: - CVE-2026-88384: NULL pointer dereference in the C++ attribute parsing path when a specially crafted EXR file containing an unknown-type attribute with dataSize set to zero is processed bsc1282700...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Wing FTP Server whoami root 参考リンク CVE-2025-47812 Wing FTP Server 7.4.4 リリース（修正版） 4m3rr0r によるオリジナル PoC クレジット 発見とオリジナルエクスプロイト: Sheikh Mohammad Hasan（別名 4m3rr0r） 整理と簡素化: Esteban Zárate...

CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

PoC-CVE-2025-69421

CVE-2025-69421 仅崩溃复现器 本仓库包含一个最小的畸形 PKCS12 文件，可在隔离的实验室环境中复现 CVE-2025-69421。 生成的 PFX 包含 EncryptedData，其 EncryptedContentInfo 省略了可选的 encryptedContent 字段。易受影响的 OpenSSL 版本可能会将 NULL ASN1OCTETSTRING 指针从 PKCS12unpackp7encdata 传递给 PKCS12itemdecryptd2iex，而后者在未进行 NULL 检查的情况下解引用该指针。...

EUVD-2026-91584

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66859 Apache Thrift: c_glib multiplexed processor crashes on a message it cannot route

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66859

NULL Pointer Dereference, Use of Uninitialized Variable vulnerability in Apache Thrift cglib bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-66859

Apache Thrift versions prior to 0.25.0 are vulnerable to a NULL Pointer Dereference and Use of Uninitialized Variable within the c_glib bindings . Specifically, the c_glib multiplexed processor can be triggered to crash when it encounters a message it cannot route. The impact of this vulnerabilit...

CVE-2026-87117

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-87117 Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-87117

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

CVE-2026-87117

A NULL pointer dereference vulnerability exists in the Apache Thrift PHP bindings affecting versions before 0.25.0 . The root cause involves the PHP thrift_protocol accelerator dereferencing a missing container-element spec. This vulnerability can result in a high impact on availability (CVSS 8.7...

CVE-2026-87117 Apache Thrift: PHP `thrift_protocol` accelerator dereferences a missing container-element spec

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

EUVD-2026-91399

NULL pointer dereference vulnerability in Apache Thrift PHP bindings. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...

Security update for openssl-3

This update for openssl-3 fixes the following issues: CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. CVE-2026-75805: NULL Pointer Dereference in CMP Client...

SUSE-SU-2026:4419-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-54872: Timing Side-Channel in Scalar Multiplication for Non-NIST EC Curves bsc1280591. - CVE-2026-75805: NULL Pointer Dereference in CMP Client...

httpd: httpd: mod_heartmonitor: Denial of Service via NULL pointer dereference

A flaw was found in the modheartmonitor module of the Apache HTTP Server. A remote, unauthenticated attacker can exploit a NULL pointer dereference vulnerability when the module is configured with a unicast listener. By sending specially crafted network traffic to the listening service, an attack...