CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN バッファオーバーリード 注記: これは私たちが発見したものではありません。私たちは公開情報に基づいて、これに対するPoCを作成しただけです。 https://nvd.nist.gov/vuln/detail/cve-2024-5535...

Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo 此代码在功能上近似于 Citrix Bleed 漏洞（CVE-2023-4699），该漏洞源于 C 语言中错误处理 snprintf 返回值的问题。...

overread

overread CVE-2023-4966 Citrix Bleed オーバーリードバグをシミュレートします これは、ハーバード大学のCS50 Cybersecurity 2023のための最終プロジェクトです。これはバグについてです。小さなバグが、巨大で継続的な影響を及ぼしています。このプレゼンテーションでは、ある開発者の小さなミスから得られた「出血する洞察」を共有します。そのミスは、何百万人もの人々にとって大きな問題を引き起こし続けています。 動画 Citrix Bleed 動画（YouTube） 2023年12月4日録画 メモ このC言語のデモプログラムは、snfprintf...

SUSE SLES15 Security Update : freerdp (SUSE-SU-2026:1129-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1129-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. -...

cve-images

cve-images — 故意设计有漏洞的实验镜像 一个用于在隔离实验室中进行安全研究的故意设计有漏洞 的Docker镜像集合。最初是nginx CVE复现，现已扩展为更广泛的故意设计有漏洞的镜像集（例如DVWA）。 ⚠️ 安全性 这些镜像是 故意 存在漏洞的。其中一个nginx CVE（CVE-2026-42945）正在被野外利用。仅在隔离/本地网络上运行。切勿部署到公共主机，也切勿将它们当作生产镜像发布。每个镜像都带有 lab.vulnerable=true 标签及相应的说明。 nginx CVE 镜像 所有镜像均构建于一个共享基础镜像之上，该镜像从源代码编译 nginx 1.30.0...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

PT-2026-96888

Name of the Vulnerable Software and Affected Versions RTI Connext Professional Core Libraries versions 7.4.0 through 7.7.0 RTI Connext Professional Core Libraries versions 7.3.0 through 7.3.1.5 RTI Connext Professional Core Libraries versions 6.1.2.21 through 6.1.x Description An issue involving ...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956

OpenImageIO , a toolset for reading, writing, and manipulating image files used in VFX/animation, is affected by a heap-buffer-overread in IffInput::readimg() . When processing an uncompressed 16-bit IFF image with a z-buffer, the function allocates a temporary scanline based on m_header.rgba_cou...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

SUSE CVE-2026-92498

In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that the message was large enough to hold the expected event:...

Linux Distros Unpatched Vulnerability : CVE-2026-92498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that th...

Linux Distros Unpatched Vulnerability : CVE-2026-93129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 platform/x86: dell-wmi: Recognise or support new...

EulerOS Virtualization 2.11.1 : util-linux (EulerOS-SA-2026-3479)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifical...

Linux Distros Unpatched Vulnerability : CVE-2026-92497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough...

Linux Distros Unpatched Vulnerability : CVE-2026-92496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: Avoid buffer overread in ath11kwmitlvoprx Currently, in ath11kwmitlvoprx, the firmware buffer is read without first verifying that the buffer has...

DEBIAN-CVE-2026-93129

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...