231 matches found
PIE-Stack-Clash-CVE-2017-1000253
PIE-Stack-Clash-CVE-2017-1000253 Demo-ing CVE-2017-1000253 in a container. This demo relies on Qualys POC code that performs the exploit over CentOS. Install a vulnerable kernel 1.Install CentOS 7 2.Install Docker 3.Edit the /etc/yum.repos.d/CentOS-Vault.repo file: 1.Change each entry to path to...
Chimay-Red
Chimay-Red Reverse engineering of Mikrotik exploit from Vault 7 CIA Leaks See the PDF for more info not updated Vulnerable versions Until RouterOS 6.38.4 What's new in 6.38.5 2017-Mar-09 11:32: ! www - fixed http server vulnerability; Proof of concepts CrashPOC Simple crash sending -1 as...
Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image
Summary Multiple vulnerabilities were addressed in IBM Observability with Instana within Instana Agent container image build 1.0.328 Vulnerability Details CVEID:CVE-2026-6368 DESCRIPTION: Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to...
EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-4049)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv...
EulerOS 2.0 SP11 : glibc (EulerOS-SA-2026-4321)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's...
EulerOS 2.0 SP13 : glibc (EulerOS-SA-2026-4140)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Calling wordexp with WRDEAPPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the wewordv...
EulerOS 2.0 SP11 : glibc (EulerOS-SA-2026-4230)
According to the versions of the glibc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's...
ROOT-OS-ALPINE-317-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root
Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root
Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.15. Multiple fixed versions available...
TencentOS Server 4: glibc (TSSA-2026:0850)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
OESA-2026-3418 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
GHSA-JJ7C-H3WM-VJFW vulnerabilities
Vulnerabilities for packages: busybox...
SUSE CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
DEBIAN-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
AZL-95492 CVE-2026-6791 affecting package glibc 2.38-21
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
UBUNTU-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
EUVD-2026-55729
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
CVE-2026-6791 concerns tilde expansion in wordexp within glibc. When expanding paths starting with ~username, parse_tilde extracts the username and allocates memory for it on the stack via strndupa. No bounds checks on the username length can exhaust stack space, enabling a stack-clash condition ...