CVE-2026-84118-who-labeled-the-crit-as-a-high

CVE-2026-84118 — Use-after-free du GC SpiderMonkey Bug 2057457 C'est l'un de ces cas où Mozilla a qualifié de « High » une faille « Critical ». Donc si c'est le cas, quelqu'un voudra peut-être aller demander à Firefox de mettre à jour le paiement des chasseurs de bugs d'origine. EN BREF : Vous...

CVE-2026-65343

CVE-2026-65343 — AppleKeyStore OOB Read KASLR Defeat Component: AppleKeyStore kernel extension — LibSerSEPControlDeserialize Affected: iOS / iPadOS 26.6 23G71 and earlier Fixed in: iOS / iPadOS 26.6.1 23G83 Type: Out-of-Bounds read in SEP control message deserialization Impact: Kernel pointer lea...

CVE-2016-5195

记录仅以学习为目的，禁止用于非法用途 Principe La vulnérabilité repose sur l'écriture concurrente de pages sales, permettant de modifier le contenu d'un fichier initialement en lecture seule. Si le fichier modifié appartient à root et possède le bit SUID, il est alors possible de l'exploiter pour élever ses...

vivo-root-build

PD2415 6.6.89 Candidat Full-Flow Cette source est basée sur le moteur IonStack PD2415 6.6.57 du même appareil/même SoC : perf KASLR, pselect GhostLock, CFI fops, pipe physrw. La fermeture du porteur dumpstate est conservée à partir de la méthode PD2241 validée. La cible archivée 6.6.89 conserve...

CVE-2026-39363

CVE-2026-39363 — Lecture arbitraire de fichiers via WebSocket du serveur de développement Vite détection en masse Avertissement : Cet outil est destiné uniquement aux tests de sécurité autorisés et à la recherche pédagogique. L'utilisateur doit se conformer aux lois et réglementations locales ;...

CVE-2026-26336-PoC

CVE-2026-26336 — Lecture de fichier non authentifiée dans Alfresco Share Vue d'ensemble Alfresco Share expose un point de terminaison /share/page/resource/ utilisé pour servir des ressources statiques. Dans les versions vulnérables, ce point de terminaison ne restreint pas correctement le path...

CVE-2026-7482-PoC

CVE-2026-7482 : Lecture hors limites du tas dans Ollama PoC 1-day Ce dépôt contient une chaîne d'exploitation Proof of Concept PoC 1-day pour CVE-2026-7482 , une vulnérabilité de lecture hors limites OOB non authentifiée dans le chargeur de modèles GGUF d'Ollama versions antérieures à 0.17.1...

CVE-2026-106428

An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...

CVE-2026-82334 IBM Guardium Data Protection Out-of-bounds Read

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

EUVD-2026-95249

IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...

CVE-2026-82334

IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser within the Windows S-TAP component . A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet containing invalid offset or len...

CVE-2021-43798

CVE-2021-43798 by Privacy Hunter Affected versions: Grafana 8.0.0-beta1 to 8.3.0 patched versions excluded Vulnerability type: Directory Traversal Severity: Critical Platform: Grafana open-source monitoring and observability platform ⚠️ Vulnerability details Directory traversal can be performed in...

CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

CVE-2026-106437

The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...

CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver

The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...

EUVD-2026-95144

An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...

CVE-2026-106428

An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...

CVE-2026-106428 Out-of-bounds read in SCRAM response parsing in MongoDB C Driver

An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...

CVE-2026-106428

The MongoDB C Driver is vulnerable to an out-of-bounds read during SCRAM authentication response parsing . Specifically, processing a malformed server-final message can cause the driver to read one byte beyond a fixed-size buffer. A server or network intermediary capable of providing this message...