Important: Red Hat Security Advisory: OpenShift Container Platform 4.22.15 security and extras update

Red Hat OpenShift Container Platform release 4.22.15 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.22. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.21.34 security and extras update

Red Hat OpenShift Container Platform release 4.21.34 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.21. Red Hat Product Security has rated this update as having a security impact of...

RLSA-2026:69113 Moderate: apr-util security update

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines. This library contains additional utility interfaces for APR; including support for XML, LDAP, database interfaces, URI parsing and more. Security Fixes: apr-util: Apache Portable Runtime...

lwIP (Lightweight IP)

ADVISORY SUMMARY Successful exploitation of this vulnerability could result in a system crash, a DoS, or memory corruption, which could lead to code execution on the victim system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this...

CVE-2002-0200

CVE-2002-0200 Windows 用 Cyberstop Web Server 0.1 には、MS-DOS デバイス名に対する HTTP リクエストを介して、リモート攻撃者がサービス拒否（DoS）を引き起こすことができる脆弱性があります。 外部参照: https://marc.info/?l=bugtraq&m=101174569103289&w=2 著者 Alex Hernandez 別名 @alt3kx...

BigDiskBuster

BigDiskBuster Windows Defender 更新サービス拒否の脆弱性 この概念実証は UnDefend に似ており、Windows Defender がプラットフォーム/シグネチャの更新を実行するのを妨げます。 サポートされているすべての Windows バージョンで動作するようですが、PoC には多少のバグがあり、書き直しが必要ですが、意図は伝わるはずです。...

http2-bomb

HTTP/2 爆弾 — CVE-2026-49975 HTTP/2 ストリーム増幅 PoC · Docker · Webコンソール 脆弱性 HTTP/2 は単一のTCP接続で複数のストリームを多重化できます。このPoCは、多数の内部参照を含む特別に形成されたHEADERSフレームを作成し、サーバーがそれらを追跡するために大量のメモリを割り当てるように強制します。...

OpenEXR: OpenEXR: Heap out-of-bounds write in exrmultiview via crafted EXR files

A flaw was found in OpenEXR. A remote attacker could exploit this vulnerability by providing specially crafted EXR image files to the exrmultiview utility. When processing these files, the utility can write beyond its allocated memory on the heap, leading to a heap out-of-bounds write. This could...

misfortune-cookie

CVE-2014-9222「Misfortune Cookie」PoCスイート AllegroSoft RomPagerのHTTPクッキー処理におけるスタックオーバーフロー（4.34未満の全バージョン）。細工されたCookie:ヘッダーを含む単一の未認証リクエストでメモリが破壊されます。影響：管理者認証バイパス、DoS/再起動、および（ファームウェア固有のオフセットを使用した）リモートコード実行。 所有しているハードウェア、または明示的にテストを許可されたハードウェアに対してのみ使用してください。 対話型コンソール（推奨） root@kitploit: python3 main.py そ...

mod_auth_openidc: mod_auth_openidc: Denial of Service via malformed state cookie parsing

A flaw was found in modauthopenidc, an OpenID Connect Relying Party module for Apache HTTP servers. A remote attacker can exploit this vulnerability by sending a specially crafted HTTP request with a malformed state cookie. This can lead to an out-of-bounds read and a one-byte out-of-bounds write...

Important: Red Hat Security Advisory: mod_auth_openidc security update

An update for modauthopenidc is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2016-2233

CVE-2016-2233 CVE-2016-2233は、広く使われているIRCソフトウェアHexchatに関連するスタックベースのバッファオーバーフローの脆弱性です。IRCサーバーを構築し、それに対して攻撃を仕掛けて、サーバーに接続しているすべてのクライアントをクラッシュさせます。Ubuntu 12.04上でPythonを使用して攻撃を実行しました。脆弱性を修正するパッチを作成し、様々なテストで実際に機能することを確認しました。 Hexchatのインストール方法 システム環境: Ubuntu 12.04 seed Pythonバージョン: 2.7.12...

kernel: tipc: fix double-free in tipc_buf_append()

A flaw was found in the Linux kernel's Transparent Inter-Process Communication TIPC module. This vulnerability, a double-free, occurs when the tipcbufappend function incorrectly handles memory after a socket buffer skb reallocation. An attacker could potentially exploit this to cause system...

kernel: rtnetlink: add missing netlink_ns_capable() check for peer netns

A flaw was found in the Linux kernel's rtnetlink component. An unprivileged local user, leveraging a user namespace, can exploit a missing CAPNETADMIN capability check in the rtnlnewlink function. This allows the user to create paired network devices in arbitrary network namespaces, including the...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

kernel: scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target functionality. This vulnerability, a heap overrun, occurs because the iscsiencodetextoutput function does not properly check buffer capacity when processing login requests. A remote attacker could exploit...

USN-8799-1 libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...

USN-8799-1: libssh2 vulnerabilities

It was discovered that libssh2 incorrectly handled certain publickey subsystem attributes. A remote attacker controlling a malicious SSH server could use this issue to cause a denial of service or possibly execute arbitrary code. CVE-2026-58050 It was discovered that libssh2 did not properly...

CVE-2002-0448

CVE-2002-0448 Xerver 2.10 - 複数のリクエストによるサービス拒否の脆弱性 Exploit-db 公開先: https://www.exploit-db.com/exploits/21336/ 著者 Alex Hernandez aka @alt3kx...

OPENSUSE-SU-2026:21903-1 Security update for rabbitmq-server

This update for rabbitmq-server fixes the following issues: - CVE-2026-44839: XSS in management UI due to unsanitized vhost names bsc1266465. - CVE-2026-57212: The rabbitmqmanagement HTTP API accepts oversized valid JSON bodies on withdecode and directrequest paths bsc1271318. - CVE-2026-57213:...