224 matches found
PIE-Stack-Clash-CVE-2017-1000253
PIE-Stack-Clash-CVE-2017-1000253 Демонстрация CVE-2017-1000253 в контейнере. Эта демонстрация основана на коде POC от Qualys, который выполняет эксплойт на CentOS. Установка уязвимого ядра 1.Установите CentOS 7 2.Установите Docker 3.Отредактируйте файл /etc/yum.repos.d/CentOS-Vault.repo: 1.Измени...
Chimay-Red
Chimay-Red Vault 7 CIA 유출 자료에 포함된 Mikrotik 익스플로잇의 리버스 엔지니어링 더 많은 정보는 PDF를 참조하세요 업데이트되지 않음 취약한 버전 RouterOS 6.38.4까지 6.38.5 2017-Mar-09 11:32의 새로운 점: ! www - http 서버 취약점 수정; 개념 증명 CrashPOC POST 헤더에 content-length를 -1로 보내는 간단한 크래시 StackClashPOC 두 개의 스레드를 사용하는 스택 클래시 익스플로잇, ROP 체인 누락 작동하는 익스플로잇 ROP가...
ROOT-OS-ALPINE-317-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root
Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.17. Multiple fixed versions available...
ROOT-OS-ALPINE-315-CVE-2022-48174 CVE-2022-48174 in busybox - Patched by Root
Root has patched CVE-2022-48174 in the busybox package for Root:Alpine:3.15. Multiple fixed versions available...
TencentOS Server 4: glibc (TSSA-2026:0850)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0850 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...
OESA-2026-3418 glibc security update
The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...
GHSA-JJ7C-H3WM-VJFW vulnerabilities
Vulnerabilities for packages: busybox...
SUSE CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
DEBIAN-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
AZL-95492 CVE-2026-6791 affecting package glibc 2.38-21
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
UBUNTU-CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
EUVD-2026-55729
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
CVE-2026-6791 concerns tilde expansion in wordexp within glibc. When expanding paths starting with ~username, parse_tilde extracts the username and allocates memory for it on the stack via strndupa. No bounds checks on the username length can exhaust stack space, enabling a stack-clash condition ...
CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...
CVE-2026-6791 Potential stack-based buffer clash during tilde expansion in wordexp
When expanding paths that begin with a tilde followed by a username, the internal parsetilde function extracts the username to determine the user's home directory. The implementation allocates memory for this username directly on the stack using the strndupa macro. Because the size of this...