Lucene search
+L

1544 matches found

RedhatCVE
RedhatCVE
added 2026/09/15 5:39 p.m.2 views

CVE-2026-91948

A flaw was found in FreeRDP. An authenticated client can send specially crafted, oversized messages to the server when the CHANNELOPTIONSHOWPROTOCOL feature is active. This can cause a buffer underflow, leading to corruption of memory and potentially allowing an attacker to execute malicious code...

7.7CVSS6.4AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/09/15 7:53 a.m.8 views

fluffi

FLUFFI FLUFFI - ペネトレーションテスター向け分散進化的バイナリファザー プロジェクトについて 高レベルの概要 初心者向けチュートリアル 始め方 使い方 HOWTOs 技術詳細 FLUFFIへの貢献 ライセンス 発見されたバグ これまでのところ、FLUFFIはほぼ独占的にSIEMENSの製品およびソリューションで使用されてきました。そこで発見されたバグは公開されません。 しかし、FLUFFIは以下の公開されたバグを発見しています(このリストを最新に保つためにご協力ください): bcshiftaddsubにおけるバッファアンダーフローCVE-2019-11046...

5.3CVSS7.3AI score0.04082EPSS
SaveExploits0References9
Kitploit
Kitploit
added 2026/09/15 7:53 a.m.86 views

fluffi

FLUFFI FLUFFI - A distributed evolutionary binary fuzzer for pentesters. About the project High level overview Beginner Tutorial Getting started Usage HOWTOs Technical Details Contributing to FLUFFI LICENSE Bugs found So far, FLUFFI was almost exclusively used on SIEMENS products and solutions...

5.3CVSS6.8AI score0.04082EPSS
SaveExploits0References9
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.11 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Wifi: wlcore – Ensure skbheadroom before calling skbpush. This fix prevents occasional skbunderpanic errors in wl1271txwork. In this case, the allocated headroom is less than necessary typically 110 – 94 = 16 bytes...

5.5CVSS5.3AI score0.00133EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/09/14 12:41 p.m.13 views

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: rtl818x: rtl8187: Fixed a potential buffer underflow in rtl8187rxcb. The rtl8187rxcb function calculates the RX descriptor header address by subtracting its size from the skbtailptr. However, it does not validate whether th...

6.2AI score0.00208EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/13 9:11 a.m.6 views

tools-for-CVE-2018-1000001

CVE-2018-1000001 的工具 检查漏洞: root@kitploit: $ cat /proc/sys/kernel/unprivilegedusernsclone 输出: root@kitploit: 1 如果文件 "/proc/sys/kernel/unprivilegedusernsclone" 不存在: root@kitploit: $ unshare -mU /bin/sh -c "sleep 5" & /bin/sh -c "sleep 1; cd /proc/$!/cwd; realpath .; kill -9 $!" 输出必须包含字符串...

7.8CVSS8.1AI score0.13368EPSS
SaveExploits10
Cvelist
Cvelist
added 2026/09/11 7:44 p.m.27 views

CVE-2026-89526 svcrdma: Validate Read chunk positions before reconstruction

In the Linux kernel, the following vulnerability has been resolved: svcrdma: Validate Read chunk positions before reconstruction The RPC/RDMA Read chunk position field is supplied by the remote client and stored verbatim in the parsed chunk list. xdrcountreadsegments checks only 4-byte alignment;...

9.8CVSS0.00626EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/09/11 7:42 p.m.10 views

CVE-2026-81007

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmbwrite read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block writ...

7.1CVSS6AI score0.00126EPSS
SaveExploits0
OSV
OSV
added 2026/09/11 7:42 p.m.8 views

CVE-2026-81007 ipmi: ipmb: validate write message length

In the Linux kernel, the following vulnerability has been resolved: ipmi: ipmb: validate write message length ipmbwrite read message fields before validating the length byte. A zero or short write can read uninitialized stack bytes. A length smaller than the SMBus header underflows the block writ...

7.1CVSS6.1AI score
SaveExploits0References11
RedHat Linux
RedHat Linux
added 2026/09/08 1:25 a.m.7 views

kernel: crypto: qat - validate RSA CRT component lengths

A flaw was found in the Linux kernel's QAT QuickAssist Technology crypto module. This vulnerability occurs in the RSA key parser when handling CRT Chinese Remainder Theorem components. An underflow can happen during a memory copy operation if an RSA CRT component is larger than its allocated...

7.8CVSS6.4AI score0.00169EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/07 12:00 a.m.4 views

UBUNTU-CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

5.9AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2026/09/07 12:00 a.m.6 views

CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

5.7AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/04 1:23 a.m.10 views

CVE-2026-85498

Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow...

5.9AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/04 12:00 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-85498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Debian Linux - policykit-1 - None Red Hat Enterprise Linux - polkit: Regression in CVE-2026-4897 fix polkit readcookie - stack buffer underflow Ubuntu Linux -...

5.5CVSS5.9AI score0.00153EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/09/03 12:00 a.m.9 views

Oracle Linux 8 : ELSA-2026-62144-0: / wget (ELSA-2026-621440)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-621440 advisory. - Fix CVE-2026-58469: buffer underflow in cleanmetalinkstring - Fix CVE-2026-58471: buffer overflow in convertfname - Fix CVE-2026-58472: integer and...

8.7CVSS5.9AI score0.00351EPSS
SaveExploits0References4
Nuclei
Nuclei
added 2026/08/29 10:07 a.m.12 views

PHP-FPM Path Info Buffer Underflow - Remote Code Execution

In PHP-FPM before 7.1.33, 7.2.x before 7.2.24, and 7.3.x before 7.3.11, when deployed in certain Nginx configurations with the fastcgisplitpathinfo directive, a crafted request with an empty PATHINFO can trigger a buffer underflow in the php-fpm code. This may allow an unauthenticated remote...

9.8CVSS7.5AI score0.9978EPSS
SaveExploits57References5
UbuntuCve
UbuntuCve
added 2026/08/28 12:00 a.m.11 views

CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

4.3CVSS7.2AI score0.00455EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/28 12:00 a.m.8 views

UBUNTU-CVE-2026-40013

An attacker that has valid credentials can submit a Sieve script containing an extreme numeric literal, which causes an out-of-bounds write when the ManageSieve service compiles the script. This causes memory corruption and an observed crash of the ManageSieve process, resulting in denial of...

4.3CVSS7.4AI score0.00455EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.11 views

TencentOS Server 3: mingw-glib2 (TSSA-2026:0917)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:0917 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

9.8CVSS7.3AI score0.00826EPSS
SaveExploits7References9
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-75421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aria2 =1.37.0 has a stack-buffer-underflow vulnerability in the IOFile::getLine function. CVE-2026-75421 Note that Nessus relies on the presence of the package ...

4CVSS5.4AI score0.00118EPSS
SaveExploits0References3
Rows per page
Query Builder