173904 matches found
CVE-2026-26336-PoC
CVE-2026-26336 — Lecture de fichier non authentifiée dans Alfresco Share Vue d'ensemble Alfresco Share expose un point de terminaison /share/page/resource/ utilisé pour servir des ressources statiques. Dans les versions vulnérables, ce point de terminaison ne restreint pas correctement le path...
CVE-2026-7482-PoC
CVE-2026-7482 : Lecture hors limites du tas dans Ollama PoC 1-day Ce dépôt contient une chaîne d'exploitation Proof of Concept PoC 1-day pour CVE-2026-7482 , une vulnérabilité de lecture hors limites OOB non authentifiée dans le chargeur de modèles GGUF d'Ollama versions antérieures à 0.17.1...
CVE-2026-106428
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-82334 IBM Guardium Data Protection Out-of-bounds Read
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...
EUVD-2026-95249
IBM Guardium Data Protection 12.0, 12.1, 12.2 is vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser. A remote attacker could send a specially crafted TDS LOGIN7 packet containing invalid offset or length values, potentially causing information disclosure or denial of...
CVE-2026-82334
IBM Guardium Data Protection versions 12.0, 12.1, and 12.2 are vulnerable to a heap-based out-of-bounds read in the TDS7 LOGIN7 protocol parser within the Windows S-TAP component . A remote attacker can exploit this by sending a specially crafted TDS LOGIN7 packet containing invalid offset or len...
CVE-2021-43798
CVE-2021-43798 بواسطة Privacy Hunter الإصدارات المتأثرة: Grafana من 8.0.0-beta1 إلى 8.3.0 باستثناء الإصدارات المصححة نوع الثغرة: Directory Traversal التنقل عبر الدلائل مستوى التأثير: حرج Critical المنصة: Grafana منصة مراقبة ومراقبة مفتوحة المصدر ⚠️ تفاصيل الثغرة يمكن تنفيذ اجتياز الدليل في Grafana...
CVE-2026-106437
The MongoDB C Driver contains an out-of-bounds read and write vulnerability within its BSON buffer-reservation API. The root cause is an integer underflow (CWE-191) that occurs when the API records a length smaller than the five-byte BSON minimum. Subsequent append or comparison operations can tr...
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
CVE-2026-106437 Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
Out-of-bounds read and write via undersized BSON buffer reservation in MongoDB C Driver
The BSON buffer-reservation API in the MongoDB C Driver can record a length smaller than the five-byte BSON minimum. Later append or comparison operations can underflow unsigned length calculations and read or write outside the document buffer. An actor who can influence the length supplied by an...
EUVD-2026-95144
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428 Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2026-106428
The MongoDB C Driver is vulnerable to an out-of-bounds read during SCRAM authentication response parsing . Specifically, processing a malformed server-final message can cause the driver to read one byte beyond a fixed-size buffer. A server or network intermediary capable of providing this message...
Out-of-bounds read in SCRAM response parsing in MongoDB C Driver
An out-of-bounds read in SCRAM authentication response parsing in the MongoDB C Driver can read one byte beyond a fixed-size buffer when processing a malformed server-final message. A server or network intermediary able to provide this message before server-signature verification can cause the...
CVE-2021-21017
CVE-2021-21017 ليست ثغرة أخرى من ثغرات Byte Order Mark في Adobe Reader : IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char...
desc_race-1
descrace استغلال "descrace" CVE-2021-30955 لنظام iOS 15.0 - 15.1.1 مع بدائيات قراءة/كتابة مستقرة للنواة طريقة الاستغلال 1. قم بزيادة سعة مصفوفة IOSurfaceClient إلى 0x2000، والهدف هو كتابة مؤشر يكون محتواه تحت السيطرة الكاملة ثم استخدام واجهات IOSurfaceRootUserClient لتحقيق قراءة/كتابة النواة. حجم...
CVE-2026-41551
إعادة إنتاج CVE-2026-41551 الثغرة: تجاوز المسار النسبي في خدمتي fileserver / fileserver2 في Siemens ROS CVSS v3.1: 9.1 AV:N / AC:L / PR:N / UI:N / S:U / C:H / I:H / A:N الإصدارات المتأثرة: ros-sharp جميع الإصدارات name.substr10; // إزالة "package://" std::string package = address.substr0,...
SASTRA-ADI-WIGUNA-CVE-2026-21858-Holistic-Audit
= doi.org/10.5281/zenodo.18278825 = orcid.org/0009-0007-7728-256X تحليل إعادة البناء CVE-2026-21858: Ni8mare - سلسلة استغلال كاملة لـ RCE في n8n 1. الملخص التنفيذي والنظرة العامة تقدم هذه الوثيقة تحليلًا تقنيًا حتميًا لإعادة بناء ثغرة CVE-2026-21858، المُسمّاة داخليًا Ni8mare. تحمل هذه الثغرة درج...