CVE-2019-0708

明天要去参加婚礼，如果我没找到什么，那就让别人接手吧 如果还没有公开的崩溃PoC，我打算周五在这里发布……也许下周，取决于漏洞数量是否持续下降。 https://vimeo.com/339425966 我对你用这个工具所做的事情不负责任，它应该仅用于教育目的。 没有移植套接字以支持Server 2003和Windows XP，但如果你愿意，应该可以直接添加（添加安全交换PDU并计算）。...

SUSE CVE-2022-29224

Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature which can "hold" prevent removal upstrea...

CVE-2025-55182-scanner

RSC Surface & Crash Detector 本工具是一种非侵入式的安全检测脚本，用于识别暴露的 React Server Components RSC 表面，并验证与以下内容相关的 崩溃型漏洞行为 ： CVE-2025-55182 CVE-2025-66478 它旨在用于 防御性安全测试、WAF 验证以及应用程序加固 工作流程。 此脚本 不执行漏洞利用或命令执行 。它严格进行检测和分类。 功能特性 自动扫描： http:// https:// 支持重定向的请求（跟随 30x 响应） 通过协议指纹检测 RSC 表面 使用非破坏性载荷进行崩溃型漏洞探测...

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This issue was addressed in the epan/dissectors/packet-bacapp.c file by limiting the amount of recursion...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB before 10.7.2 allowed applications to crash because it did not recognize that SELECTLEX::nestlevel is local to each VIEW...

Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS

After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...

Astra Linux – Vulnerability in yajl

In the yajl-ruby gem version 1.3.0 for Ruby, when a properly crafted JSON file is provided to Yajl::Parser.new.parse, the entire Ruby process crashes with a SIGABRT in the yajlstringdecode function in yajlencode.c. This causes the entire Ruby process to terminate, potentially leading to a denial ...

Astra Linux – Vulnerability in ffmpeg5

A flaw was discovered in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services a...

Astra Linux – Vulnerability in Wireshark

In Wireshark versions 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This issue was addressed in the epan/dissectors/packet-multipart.c file by correcting the deallocation of invalid MIME parts...

Astra Linux – Vulnerability in Apache2

In Apache HTTP Server 2.4.59 and earlier, a null pointer dereference vulnerability in modproxy allows an attacker to crash the server through a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue...

Astra Linux – Vulnerability in bind9

BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration that uses BIND’s default settings, the vulnerable code path is not exposed. However, a server can become vulnerable by explicitly setting valid values for the...

SUSE CVE-2026-76927

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-63138

CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

PT-2026-79141

libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...

CVE-2026-76927

H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...

EUVD-2026-62754

IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...

UBUNTU-CVE-2026-71135

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...

JLSEC-2026-1262 In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are...

In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...

wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin

...

PT-2026-78840

Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the C12.22 protocol dissector allows a denial of service. A dissector is a software component that breaks down network traffic into a...