smack

SMACK is both a modular software verification toolchain and a self-contained software verifier. It can be used to verify the assertions in its input programs. In its default mode, assertions are verified up to a given bound on loop iterations and recursion depth; it contains experimental support...

CVE-2016-2569

Hello there, Thank you for reading my first blog entry. Today we will go with exploit creation for one of the open-source tool Squid Caching proxy server. So What Is Squido? Squid is a caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. It reduces bandwidth and improves response time...

vaas-cve-2015-5477

Vulnerability as a Service - CVE 2015-5477 A Debian Wheezy Linux system with a vulnerable version of bind9 to showcase CVS-2015-5477. Overview This docker container is based on Debian Wheezy and has been modified to use a vulernable version of bind9 and the matching additional dependencies. Usage...

CVE-2026-60206

CVE-2026-60206 – PoC de omisión de autenticación SAML en Oracle WebLogic Server Este repositorio proporciona un exploit de prueba de concepto para CVE‑2026‑60206 , una vulnerabilidad crítica de omisión de autenticación en la implementación SAML de Oracle WebLogic Server. La falla permite que un...

EUVD-2026-83274

In osmo-iuh from 0.1.0 through 1.8.0 a reachable assertion was found in the ranaphandlecodt function via a arbitrarily sized NAS-PDU that leads to process crash and remote denial of service...

CVE-2026-75894

osmo-iuh versions 0.1.0 through 1.8.0 contain a reachable assertion in the ranap_handle_co_dt() function that can be triggered by an arbitrarily sized NAS-PDU , resulting in a process crash and remote denial of service . The flaw is an insufficient bounds check on the incoming PDU size before the...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Aviso de seguridad: Denegación de servicio remota mediante aserción alcanzable en el manejo de prefijos de URL rouille CVE ID asignado: CVE-2026-66754 Resumen Request::removeprefix comprueba la URL decodificada en porcentaje, pero hace la aserción sobre la URL cruda. Una solicitud cuya ruta...

EulerOS Virtualization 2.11.0 : nghttp2 (EulerOS-SA-2026-3531)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...

Linux Distros Unpatched Vulnerability : CVE-2026-8674

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200...

Linux Distros Unpatched Vulnerability : CVE-2026-90260

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - btrfs: zoned: don't clobber the extent buffer when zeroing it out On a zoned filesystem a freed-but-still- dirty tree block is written out as zeros...

EulerOS Virtualization 2.11.1 : nghttp2 (EulerOS-SA-2026-3444)

According to the versions of the nghttp2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. Prior to version 1.68.1, the nghttp2 library stops...

vcenter_saml_login

vCenter SAML Login Tool Una herramienta para extraer el certificado del proveedor de identidad IdP de las copias de seguridad de vCenter e iniciar sesión como Administrador Antecedentes Comúnmente, durante los compromisos, obtenemos acceso a las copias de seguridad de vCenter en un servidor de...

CVE-2026-8674

A flaw was found in the GNU C Library glibc DNS stub resolver. This vulnerability allows a remote attacker on the local network to cause a denial of service by providing a specially crafted, excessively long search domain. When the resolver attempts to initialize with this long domain from...

CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

DEBIAN-CVE-2026-8674

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

AZL-101843 CVE-2026-8674 affecting package glibc 2.38-21

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-8674

A assertion failure in the DNS stub resolver of the GNU C Library (glibc) versions 2.26 through 2.44 aborts any process that resolves names through the library. The root cause is that when the search list in /etc/resolv.conf or the LOCALDOMAIN environment variable contains a domain of roughly 200...

CVE-2026-8674 Assertion failure in the DNS stub resolver with a long search domain

Initializing the DNS stub resolver from an /etc/resolv.conf file, or a LOCALDOMAIN environment variable, whose search list contains a domain of roughly 200 characters or more in the GNU C Library version 2.26 to 2.44 results in an assertion failure which aborts the process. The resolver truncates...

CVE-2026-92416

A vulnerability has been found in Open5GS up to 2.8.0. Affected by this issue is the function smfn4handlesessionreportrequest of the file src/smf/n4-handler.c of the component PFCP Session Report Request Handler. The manipulation leads to reachable assertion. The attack may be initiated remotely...