CVE-2020-8597

CVE-2020-8597 eap.c dans pppd dans ppp 2.4.2 à 2.4.8 présente un débordement de tampon rhostname dans les fonctions eaprequest et eapresponse. Si vous parvenez à obtenir "EAP: unauthenticated peer name" suffisamment long, il semble que mon client le limite à 255, vous pouvez provoquer un...

RLSA-2026:77690 Important: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: ipvlan: Make the addrslock be per port CVE-2026-23103 kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use CVE-2026-53360 kernel: vsock/virtio: fix zerocopy completion for...

Security Bulletin: UPDATED security alert for multiple OpenSSL vulnerabilities impacting AIX. Updated On: Fri Oct 9 03:18:49 CDT 2026. Reason: Updated the iFix to include the previously missing OpenSSL 1.1 and 1.0.2 shared libraries.

Summary Vulnerabilities in OpenSSL could cause excessive memory consumption CVE-2026-54874, heap buffer overflow CVE-2026-63072, indefinite cache growth leading to denial of service CVE-2026-63074, invalid pointer dereference CVE-2026-63076, and authentication forgery CVE-2026-75803. OpenSSL is...

CVE-2026-36980-Kernel-BSOD-DoS-PoC

CVE-2026-36980-Kernel-BSOD-DoS-PoC تاريخ المشروع: فبراير 2026 / تم اكتشاف ثغرة تجاوز سعة المخزن المؤقت في معالج IOCTL لبرنامج تشغيل النواة pwdrvio.sys. تسمح الثغرة لمهاجم محلي غير مميز بإتلاف ذاكرة تجمع النواة، مما يؤدي إلى انهيار فوري للنظام BSOD ورفض الخدمة. 2026-02-09 تم إخطار البائع 2026-03-0...

CVE-2026-106432

A flaw was found in the MongoDB PHP Driver. In non-default runtime configurations permitting multi-gigabyte values, the BSON Binary JSON encoder converts large string lengths without validation, triggering an integer wrap and subsequent heap-based buffer overflow when encoding strings near four...

CVE-2026-27654-PoC

CVE‑2026‑27654 – إثبات مفهوم لمعالجة مسار DAV Alias في وحدة ngxhttpdavmodule في nginx يوفر هذا المستودع استغلالاً لإثبات المفهوم PoC لثغرة CVE‑2026‑27654 ، وهي ثغرة تجاوز سعة الكومة heap overflow في وحدة ngxhttpdavmodule الخاصة بـ nginx. ينشأ الخلل من تدفق سفلي لحجم sizet عند معالجة طلبات MOVE/CO...

Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-30892 DESCRIPTION: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly...

Security Bulletin:Vulnerabilities exists in callhome of IBM Netezza Appliance

Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in security patch ina-release-callhomeimage-1.0.2.3. Vulnerability Details CVEID:CVE-2022-2042 DESCRIPTION: Use After Free in GitHub repository vim/vim prior to 8.2. CWE:CWE-416: Use After Free CVSS Source: IBM X-Forc...

kernel: scsi: target: configfs: Bound snprintf() return in tg_pt_gp_members_show()

A flaw was found in the Linux kernel's SCSI target subsystem. This vulnerability, a buffer overflow, occurs in the tgptgpmembersshow function when processing long iSCSI IQN names. An attacker could potentially exploit this by providing a specially crafted input, leading to the disclosure of...

CVE-2026-98206

A flaw was found in the Linux kernel's Cypress Generation 5 touchscreen cyttsp5 driver. This vulnerability can lead to a Denial of Service DoS due to memory corruption because the driver does not properly validate the size of incoming data reports before copying them into a fixed-size buffer. A...

DEBIAN-CVE-2026-98375

In the Linux kernel, the following vulnerability has been resolved: xen/netfront: drop RX packets with a short Ethernet header handleincomingqueue pulls pullto bytes into the head before calling ethtypetrans. pullto is the length of the first RX slot, capped at RXCOPYTHRESHOLD, and that length...

CVE-2026-19571

The ITE IT8xxx2 SHI host-command backend subsys/mgmt/echostcmd/backends/echostcmdbackendshiite.c copied the 8-byte host-command request header from the SPI Rx FIFO directly into the shared receive buffer data-inmsg and only afterwards checked the protocol version and the derived packet length. Th...

thm-ice-icecast-rce-privesc

TryHackMe — Ice: ثغرة تنفيذ التعليمات عن بعد في Icecast 2.0.1 وتصعيد الصلاحيات في ويندوز المنصة: TryHackMe نظام التشغيل المستهدف: Windows 7 / Windows Server 2008 R2 الصعوبة: سهل الفئة: تجاوز سعة المخزن المؤقت تنفيذ التعليمات عن بعد، تصعيد الصلاحيات المحلي ملخص يُوثق هذا التقرير الاختراق الكامل...

CVE-2025-5548

Casser FreeFloat FTP : analyse et exploitation de CVE-2025-5548 Anderson Steven — Master en Cybersécurité, Module 6 Vulnérabilités Travail individuel : Méthodologie d'analyse et d'exploitation des vulnérabilités Pourquoi ce dépôt Je ne voulais pas simplement livrer « voici l'exploit qui fonctionn...

S5Late

S5Late Exploit tethered du bootrom/DFU de l'iPod. Actuellement ne prend en charge que le Nano 7G ; pour prendre en charge le Nano 6G, les offsets doivent être mis à jour. Exécution Mettez votre iPod en mode DFU. Puis exécutez : ./S5Late hax 2024-12-15T23:11:34Z INFO S5Late We found an Apple Devic...

CVE-2026-19571

A race condition exists in the ITE IT8xxx2 SHI host-command backend (specifically in ec_host_cmd_backend_shi_ite.c) within the Zephyr RTOS. The vulnerability occurs because the driver copies the 8-byte host-command request header from the SPI Rx FIFO into the shared receive buffer (data->in_ms...

panos-captive-portal-rce

CVE-2026-0300 — Scanner du débordement de tampon RCE du Captive Portal User-ID PAN-OS 🎯 Présentation Débordement de tampon dans le service User-ID Authentication Portal Captive Portal de PAN-OS. Un attaquant non authentifié peut exécuter du code en tant que root sur les pare-feux Palo Alto Networ...

one-multiply-too-many-cve-2026-70638-llama-cpp-android-jni-integer-overflow

CVE-2026-70638 - Dépassement d'entier JNI LLaMA-Android de llama.cpp PoC compagnon pour l'article de Hunt-Benito « Une multiplication de trop : CVE-2026-70638 — Dépassement d'entier dans l'allocation de tas JNI Android de llama.cpp » →...

CVE-2026-42533-POC

CVE-2026-42533 Débordement de tampon sur le tas en pré-auth et fuite d'informations sur le tas dans nginx, causés par l'absence de sauvegarde/restauration de l'état des captures PCRE entre les deux passages du moteur de script. Une variable map basée sur une regex, évaluée entre deux références d...

MS17-010

MS17-010 هذا المستودع مخصص لنشر أعمالي حول MS17-010. لا توجد لدي أي خطة لتقديم أي دعم. جميع مشكلات الدعم لن تحصل على رد مني. الملفات BUG.txt تفاصيل ثغرة MS17-010 وبعض التحليلات checker.py سكربت للعثور على أنبوب مسمى named pipe قابل للوصول eternalblueexploit7.py إكسبلويت Eternalblue لنظامي ويندوز...