78 matches found
CVE-2026-84256
A flaw was found in OpenVPN on Windows. An argument parsing issue allows remote authenticated users to execute arbitrary commands by providing a specially crafted certificate subject. This vulnerability could lead to a complete compromise of the affected system...
CVE-2021-3156
CVE-2021-3156 在本文件中，我们包含了理解本仓库代码及其工作原理所需的所有知识。所有解释均基于 QUALYS 发布的报告。其中还解释了更多利用形式。 要求 受影响的 sudo 版本为 1.8.2 到 1.8.31p2 的旧版本以及 1.9.0 到 1.9.5p1 的所有稳定版本，且均采用默认配置。 本仓库已在 Ubuntu 20.04（sudo 1.8.31）上测试。在此环境中，我们以 root 权限打开一个终端。 分析 如果 Sudo 以 shell 模式执行命令： 通过 -s 选项，该选项设置 sudo 的 MODESHELL 标志。 通过 -i 选项，该选项设置 sud...
CVE-2019-14287-demo
CVE-2019-14287 デモコンテナ これはデモ目的で構築されたコンテナであり、CVE-2019-14287 に対して脆弱なバージョンの sudo コマンドを含んでいます。 （https://www.sudo.ws/alerts/minus1uid.html） このコンテナは次のコマンドで実行できます： docker run -ti cashwilliams/cve-2019-14287-demo 設定 コンテナには3人の実在ユーザがいます： root alice bob alice ユーザは、他のユーザ（この場合、唯一の他のユーザである...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: Rejects option groups without values. The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and provides only a recognized option name, such as “cachemode”, will...
UBUNTU-CVE-2026-72104
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...
CVE-2026-72104 dm-pcache: reject option groups without values
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: reject option groups without values The pcache target parses optional arguments as name/value pairs. A table that advertises one optional argument and supplies only a recognized option name, for example "cachemode",...
CVE-2026-70456 rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args()
rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the readargs function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list. When the argument count causes the argv allocation to be exactly full, the trailing NULL terminator is...
CVE-2026-59086
A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...
EUVD-2026-56120
A vulnerability has been identified in Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execute code in the context of the current...
CVE-2026-59086
CVE-2026-59086 affects Simcenter Nastran before version V2606. The vulnerability is a stack overflow when parsing specially crafted strings as an argument to a binary, which could allow code execution in the current process. The connected documents confirm the same description across sources (NVD...
CVE-2026-59086
A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...
CVE-2026-59086
A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...
CVE-2026-59086
A vulnerability has been identified in Simcenter Femap All versions V2606, Simcenter Nastran All versions V2606. The affected applications contain a stack overflow vulnerability while parsing specially strings as argument for one of the application binaries. This could allow an attacker to execut...
DEBIAN-CVE-2026-18370
entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...
CVE-2026-18370
entr is vulnerable to Heap-based buffer overflow in runutility function. The function allocates a fixed-size heap buffer using mallocARGMAX and copies command-line arguments into it. It advances the destination pointer based on the return value of strlcpy, which returns the total length of the...
Linux Distros Unpatched Vulnerability : CVE-2026-18739
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in popt, a command-line option parsing library. An off-by-one error in the poptStuffArgs function, when repeatedly called by a host application...
DEBIAN-CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...
CVE-2026-59997
internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection...