608 matches found
CVE-2024-43363
CVE-2024-43363 Script di exploit per CVE-2024-43363 Questo script Python è progettato per verificare se un'istanza Cacti è vulnerabile a CVE-2024-43363, una vulnerabilità di Remote Code Execution RCE causata da log poisoning. Come funziona la vulnerabilità: root@kitploit: Log Poisoning: un...
cve-2023-40429-ez-device-name
HostName Panoramica HostName è un'applicazione di esempio che dimostra come un'app di terze parti possa accedere al nome del dispositivo di un utente senza l'entitlement com.apple.developer.device-information.user-assigned-device-name. Dettagli In iOS 16, Apple ha aggiunto l'entitlement...
CVE-2002-0200
CVE-2002-0200 Cyberstop Web Server für Windows 0.1 erlaubt es entfernten Angreifern, einen Denial of Service über eine HTTP-Anfrage für einen MS-DOS-Gerätenamen zu verursachen. Externe Referenz unter https://marc.info/?l=bugtraq&m=101174569103289&w=2 Autor Alex Hernandez alias @alt3kx...
MINI-VM33-G4VC-35H6
Bulletin has no description...
CVE-2026-16313
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
CVE-2026-16313 Sg3_utils: sg3_utils: arbitrary command execution via udev property injection in sg_inq --export
A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...
UBUNTU-CVE-2026-64332
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
CVE-2026-64332
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
CVE-2026-64332 USB: ulpi: fix memory leak on registration failure
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
CVE-2026-64332 USB: ulpi: fix memory leak on registration failure
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
EUVD-2026-48876
In the Linux kernel, the following vulnerability has been resolved: USB: ulpi: fix memory leak on registration failure The allocated device name is never freed on early ULPI device registration failures. Fix this by initialising the device structure earlier and releasing the initial reference...
CVE-2026-64332
The CVE-2026-64332 entry describes a Linux kernel vulnerability in the USB: ulpi driver where a memory leak occurs when registration fails. The root cause is that the allocated device name is not freed on early ULPI device registration failures. The remediation is to initialize the device structu...
EUVD-2026-48991
In the Linux kernel, the following vulnerability has been resolved: i2c: core: fix adapter deregistration race Adapters can be looked up by their id using i2cgetadapter which takes a reference to the embedded struct device. Remove the adapter from the IDR before tearing it down during...
PT-2026-64553
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the USB ULPI Ultra Low Power Interface component during early device registration failures. The issue arises because the allocated device name is not freed when...
SUSE CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
EUVD-2024-55692
The Tenda TX9 V22.03.02.20 firmware has a denial of service vulnerability in the updatedevname function of the file /goform/SetOnlineDevName...
Linux Distros Unpatched Vulnerability : CVE-2026-63893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - thunderbolt: property: Reject u32 wrap in tbpropertyentryvalid entry-value is u32 and entry-length is u16; the sum is performed in u32 and wraps. A malicious...
CVE-2026-64178
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
CVE-2026-64178 Bluetooth: bnep: Fix UAF read of dev->name
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev-name bnepaddconnection needs to keep holding the bnepsessionsem while reading dev-name just like bnepgetconnlist does; otherwise the bnepsession thread can concurrently free the netdevice, whi...
CVE-2026-64178
The CVE-2026-64178 issue is in the Linux kernel Bluetooth BNEP implementation. A use-after-free can occur when reading dev->name during bnep_add_connection() because the underlying net_device may be freed concurrently by bnep_del_connection(). The root cause is that bnep_add_connection() did n...