CVE-2022-43293

Exploits para CVE-2022-43293 Para lograr una Denegación de Servicio persistente de Windows como se muestra en el POC anterior, simplemente ejecute Exploit.bat e ingrese %windir%\system32\cng.sys cuando se le pregunte qué archivo desea sobrescribir. Aquí puede encontrar mi informe de Vulnerabilida...

CVE-2017-6074-DOS

CVE-2017-6074 - Exploit de solo DoS Pánico del kernel DCCP de Linux Este repositorio proporciona una versión modificada del exploit original CVE-2017-6074 use-after-free en el subsistema DCCP del kernel de Linux, diseñado únicamente para demostrar el impacto de Denegación de Servicio DoS. Un...

CVE-2026-108063

A null pointer dereference vulnerability exists in libhangul within the hanja_new() function. The flaw occurs because the library fails to verify that a Hanja dictionary entry contains a valid value alongside its key when parsing files. An attacker can provide a specially crafted dictionary file ...

CVE-2026-108063 Libhangul: null pointer dereference in hanja_new() when looking up a malformed hanja dictionary entry

A flaw was found in libhangul. When parsing Hanja dictionary files, the library fails to verify that an entry contains a valid value alongside its key. By providing a specially crafted dictionary file to an application that queries it, an attacker can trigger an unexpected application crash,...

CVE-2026-107386

A flaw was found in amqp091-go. A malicious server or remote peer can cause a Denial of Service DoS by sending a crafted frame header declaring an excessively large payload size during initial connection setup. This flaw causes the client to allocate large amounts of memory before validating the...

CVE-2026-107635

A flaw was found in dislocker. An integer underflow vulnerability in metadata parsing functions can lead to a Denial of Service DoS by crashing the application. By providing a maliciously crafted BitLocker volume image with an invalid datum size, an attacker can trigger an out-of-bounds memory...

CVE-2026-106431

A flaw was found in mongo-c-driver. An off-by-one error in the BSON bulk document writer allows an attacker to cause a Denial of Service DoS or memory corruption. By supplying documents of a specific cumulative size that align with a buffer boundary, an attacker can trigger a single-byte...

CVE-2026-106433

A flaw was found in libmongocrypt. This vulnerability allows an authenticated attacker with permissions to modify key vault documents, or a malicious server returning crafted documents, to cause process memory corruption or a Denial of Service DoS by crashing the application. The issue occurs...

CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-

Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...

CVE-2026-98218

A flaw was found in the Linux kernel's I2C Address Translator ATR component. When an adapter fails to register, the driver frees the channel memory without clearing its reference pointer, leaving a dangling pointer. A local user could exploit this flaw during cleanup routines to trigger a...

CVE-2026-98217

A flaw was found in the Linux kernel's mlx4 InfiniBand driver that can result in a Denial of Service DoS. When device registration encounters an error during setup, the driver frees memory objects associated with partition key interfaces but retains their references. A subsequent device cleanup...

CVE-2026-98222

A flaw was found in the Linux kernel's encrypted keys subsystem. An integer overflow occurs during memory size calculations for key data, resulting in an undersized buffer allocation. A local user can exploit this issue by supplying crafted key data to trigger an out-of-bounds write to kernel...

openssl security update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

RLSA-2026:77396 Important: openssl security update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: compat-openssl: DTLS Retransmits Handshake Messages From a Stale Buffer Offset CVE-2026-84782 For...

CVE-2026-86463

Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The search pattern can get stuck trying many combinations when it encounters a long string without an operator, causing the parser to consume excessive CPU time. An attacker can send a crafte...

CVE-2026-106432

A flaw was found in the MongoDB PHP Driver. In non-default runtime configurations permitting multi-gigabyte values, the BSON Binary JSON encoder converts large string lengths without validation, triggering an integer wrap and subsequent heap-based buffer overflow when encoding strings near four...

CVE-2026-98238

A flaw was found in the Linux kernel's t7xx Wireless Wide Area Network WWAN driver. This vulnerability allows an attacker to cause a Denial of Service DoS by sending malformed network packets. The driver fails to validate the network interface index in incoming packet headers before indexing an...

BIT-PYTHON-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

BIT-LIBPYTHON-2026-19445 Use-after-free of a server-side SSLContext when sni_callback switches contexts

A remote, unauthenticated TLS client can make a server crash or call through a freed pointer if its snicallback assigns a different context to SSLSocket.context the documented way to select a certificate per server name and nothing else keeps the original ssl.SSLContext alive. Typical cases are...

BIT-APISIX-2026-94250 Apache APISIX: Batch response aggregation can exhaust worker memory

Allocation of resources without limits or throttling vulnerability in batch-requests plugin in Apache APISIX. An unauthenticated caller can drive a gateway worker into OOM via a route where the batch-requests plugin is used and the batch endpoint is publicly exposed. This issue affects Apache...