mariadb-cve-2026-92262

MariaDB CVE-2026-92262 / 85746 / 85748 Low-privilege SQL over the normal server port. No FILE, SUPER, or plugin load. Target: mariadb:13.0.1-rc 13.0.1-MariaDB-ubu2604. Fixed in 13.0.2 / 12.3.3 also 11.8.9, 11.4.13, 10.11.19, 10.6.28 for the first two. CVE| CWE| CVSS 3.1| Bug| Proof on 13.0.1...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

PT-2026-146568

Name of the Vulnerable Software and Affected Versions Zipline versions prior to 4.3.3 Description Authenticated uploaders can write files outside the intended upload directory by providing traversal sequences in the x-zipline-filename header. Attackers utilizing the local datasource can create or...

CVE-2026-116315

Heap-based buffer overflow in PostgreSQL tsvectordelete allows a database user to execute arbitrary code as the operating system user running the database, via a tsvector whose lexeme data uses a nonstandard but valid ordering that requires additional alignment padding in the result. Versions...

MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

CVE-2021-22555-Poc

Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

CVE-2026-123747

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

Linux Distros Unpatched Vulnerability : CVE-2026-115819

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Calling the wide scanf family of functions swscanf, fwscanf, wscanf, vswscanf, vfwscanf and vwscanf with a %s or % conversion without the 'l' length modifier in...

UBUNTU-CVE-2026-123747

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

CVE-2026-123747

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

CVE-2026-123747

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

CVE-2026-123747 Pappl-retrofit: directory traversal in the add-ppdfiles and delete-ppdfiles actions

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

CVE-2026-123747

A directory traversal vulnerability exists in pappl-retrofit due to insufficient sanitization of user-supplied filenames during the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this by submitting filenames containing path traver...

EUVD-2026-123700

A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description PPD files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

libxml2: libxml2: Heap-based buffer overflow in xmlXPtrEval due to xpointer length saturation

A flaw in libxml2's xmlXPtrEvalXPtrPart function allows a local attacker to cause a heap-based buffer overflow. An integer overflow while processing an oversized xpointer expression leads to incorrect memory allocation and an out-of-bounds write, potentially resulting in information disclosure,...

util-linux: util-linux: Partition metadata compromise via integer overflow in DOS partition parser

A flaw was found in util-linux. An integer overflow vulnerability in the partition parsing library libblkid fails to properly enforce boundary checks on extended partition entries. A local attacker could exploit this flaw by presenting a crafted disk image or removable storage device for probing,...