jfrog-CVE-2023-25136-OpenSSH_Double-Free

CVE-2023-25136 إثبات المفهوم نظرة عامة هذا إثبات مفهوم لهجوم رفض الخدمة DoS لثغرة التحرير المزدوج Double-Free في OpenSSH 9.1p1 CVE-2023-25136. سيؤدي إلى تشغيل التحرير المزدوج والتسبب في تعطل abort. لفهم شامل، اطّلع على منشور المدونة المصاحب للحصول على تفاصيل متعمقة. التبعيات بايثون 3.6+ مكتبة...

CVE-2024-27804

CVE-2024-27804 root@kitploit: ./build.sh ./panic.sh root@kitploit: paniccpu 4 caller 0xfffffe0026851cdc: Unaligned kernel data abort. at pc 0xfffffe0026aed514, lr 0xfffffe0026aed5d8 saved state: 0xfffffe3a396e3200 x0: 0x000000000000000e x1: 0xfffffe1002bdc01b x2: 0x0000000000000000 x3:...

CVE-2023-25136

OpenSSH CVE-2023-25136 Doppia Free Pre-Auth – Writeup e PoC Cos'è OpenSSH? OpenSSH è uno strumento molto diffuso utilizzato per comunicazioni sicure e accesso remoto. È stato sviluppato come implementazione open-source e gratuita del protocollo di comunicazione Secure Shell SSH ed è ampiamente...

CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC Il protocollo Lindell17 simulato è vulnerabile a un exploit di estrazione di bit, consentendo a un attaccante di recuperare la chiave privata estraendo iterativamente singoli bit della chiave. Il protocollo è progettato per generare firme ECDSA in un modello...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Sicherheitsempfehlung: Remote Denial of Service durch erreichbare Assertion in der URL-Präfix-Behandlung rouille Zugewiesene CVE-ID: CVE-2026-66754 Zusammenfassung Request::removeprefix testet die prozent-dekodierte URL, führt die Assertion jedoch auf der rohen URL aus. Eine Anfrage, deren...

CVE-2026-0049

CVE-2026-0049 — Android DNG zero-click DoS dngsdk MapTable add-overflow Materiale completo di ricerca e PoC. Analisi narrativa: 🇮🇹BLOG.md · 🇬🇧BLOG.en.md. Bug : overflow di interi unsigned su fAreaSpec.Plane + fAreaSpec.Planes in dngopcodeMapTable::ProcessArea dngsdk/source/dngmiscopcodes.cpp:388...

CVE-2026-54920

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

CVE-2026-54920 OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a reachable assertion failure in the HTJ2K decode path allows a crafted HTJ2K-compressed EXR file to cause an unconditional process abo...

UBUNTU-CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

DEBIAN-CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-53532

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-53532 OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)

OpenEXR is the reference implementation and specification for the EXR image format, widely used in the motion picture industry. In versions 3.4.0 through 3.4.12, a crafted HTJ2K-compressed EXR file causes an unconditional process abort in any application that calls exrstartread on untrusted input...

CVE-2026-53532

OpenEXR (the reference implementation for the EXR image format used in the motion picture industry), versions 3.4.0 through 3.4.12 , contains a denial-of-service vulnerability in its HTJ2K-compressed EXR decoder. A crafted file containing a QCD marker with its lower five bits set to zero is passe...

CVE-2026-77384 libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal but unconditionally registers another abort listener on every refresh. As a result, a remote peer can repeatedly send...

CVE-2026-77384 libp2p: Circuit relay v2 server reservation refresh leaks abort listeners and allows remote resource exhaustion

libp2p is a JavaScript implementation of the libp2p networking stack. Prior to version 4.2.9, the reservation refresh path in reservation-store.ts reuses the same retimeableSignal but unconditionally registers another abort listener on every refresh. As a result, a remote peer can repeatedly send...

cups-filters security update

An update is available for cups-filters. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The cups-filters package contains back ends, filters, and other software...

RLSA-2026:58560 Moderate: cups-filters security update

The cups-filters package contains back ends, filters, and other software that was once part of the core Common UNIX Printing System CUPS distribution but is now maintained independently. Security Fixes: libcupsfilters: cups-filters: libcupsfilters: CUPS image filter process abort via malformed PN...

Astra Linux – Vulnerability in Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: restore set elements when delete set fails From the abort path, nftmapelemactivate needs to restore refcounters to their original state. Currently, it uses set-ops-walk to iterate over these set elements. The...

Moderate: Red Hat Security Advisory: cups-filters security update

An update for cups-filters is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

CVE-2026-53530

RaTeX is a KaTeX-compatible math rendering engine written in Rust. Prior to version 0.1.11, the public parser entrypoint ratexparser::parse&str panics on the 9-byte input \verbéxé i.e. \verb followed by the non-ASCII delimiter é. When handling a \verb command, the parser slices the verbatim...