151040 matches found
triton-cve-2025-23320
Demonstrating CVE-2025-23320 This repo replicates CVE-2025-23320, demonstrating CWE-209, Generation of Error Message Containing Sensitive InformationCVSS Score: 7.5. This vulnerability exists on all NVIDIA Triton inference servers 25.06 and before. This docker setup runs a network containing an...
cve-2024-21762-poc
cve-2024-21762-poc CVE-2024-21762 is a critical vulnerability in Fortinet's FortiOS and FortiProxy products, located in their SSL VPN component. This vulnerability allows unauthenticated remote attackers to execute arbitrary code or commands on the target system through specially crafted HTTP...
CVE-2025-54957
Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...
kernel: nvmet-rdma: handle inline data with a nonzero offset
A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...
kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer
A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...
CVE-2026-0300-POC
🛡️ CVE-2026-0300: PAN-OS User-ID™ Portal RCE Analysis Research Proof-of-Concept: CWE-787 Out-of-bounds Write 📌 Overview CVE-2026-0300 is a high-severity buffer overflow vulnerability identified in the Palo Alto Networks PAN-OS User-ID™ Authentication Portal Captive Portal. This research repository...
RLSA-2026:65993 Important: qt5-qtbase security update
Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...
qt5-qtbase security update
An update is available for qt5-qtbase. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...
PT-2026-89525
zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...
AlmaLinux 10 : qt6-qt5compat (ALSA-2026:65816)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65816 advisory. qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 Tenable has extracted the preceding description block directly from the...
Fedora 43 : rust-ppmd-rust (2026-a9bf99671c)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-a9bf99671c advisory. Update to version 1.4.1; Fixes RHBZ2526655 Security fix for GHSA-rqc2-j9v2-j22v, an out-of-bounds read in the PPMd8 decoder. Tenable has extracted the...
RHEL 9 : vim (RHSA-2026:66366)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:66366 advisory. Vim Vi IMproved is an updated and improved version of the vi editor. Security Fixes: vim: Vim: Information disclosure and denial of service...
PT-2026-89504
Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...
CVE-2026-87440
Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 al...
CVE-2026-87438
Out of bounds write in WebGL in Google Chrome on on Android prior to 1...
vim security update
9.1.083-9.0.1.el102.20 - Remove upstream references Orabug: 31197557 2:9.1.083-9.20 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator 2:9.1.083-9.19 - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes 2:9.1.083-9.18 - RHEL-215683 CVE-2026-59857 vim: stack...
CVE-2026-87604
Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 al...
CVE-2026-79592
An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 , caused by insufficient validation of file-controlled OLE summary offsets. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, low complexity, no privileges required, no user interaction, and ...
