D1rkLdr

D1rkLdr 間接動的syscall実装を備えたShellcodeローダー、MAC形式のshellcode、PEBからのAPI解決、Syscall呼び出し、実行時のsyscall命令アドレス解決...

FwHunt

FwHunt Binarly Firmware Hunt FwHunt 규칙 형식은 UEFI 펌웨어에서 알려진 취약점을 스캔하기 위해 설계되었습니다. 사용법 FwHunt 규칙은 Binarly의 FwHunt Community Scanner와 함께 사용하도록 설계되었습니다. 전체 설치 지침과 사용 정보는 해당 README에서 확인할 수 있습니다...

CABTrap_OneNote2007

CABTrapOneNote2007 Уязвимость обхода каталогов в файлах ".ONEPKG" Microsoft Office OneNote 2007 CVE-2014-2815, приводящая к произвольному выполнению кода Уязвимость обхода каталогов в файлах ".ONEPKG" Microsoft Office OneNote 2007 CVE-2014-2815, приводящая к произвольному выполнению кода OneNote...

CVE-2026-47494

NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, denial of service, and information disclosure...

PYSEC-2026-4022 Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions

Impact Python's string format functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions

ImpactPython's string format functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

DEBIAN-CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition,...

CVE-2026-103679

A flaw was found in tnef. A remote attacker could exploit this vulnerability by providing a specially crafted Transport Neutral Encapsulation Format TNEF file containing multiple message bodies. During extraction, improper memory management triggers a use-after-free and double-free condition,...

CLEANSTART-2024-DO03307 FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASF_F format demuxer that can result in heap memory reading

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit 5aba5b89d0b1d73164d3b81764828bb8b20ff32a contains an out of array read vulnerability in ASFF format demuxer that can result in heap memory reading...

CLEANSTART-2024-MH90303 FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit bab0716c7f4793ec42e05a5aa7e80d82a0dd4e75 contains an out of array access vulnerability in MXF format demuxer that can result in DoS...

CLEANSTART-2024-LZ69519 FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consu...

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit 9807d3976be0e92e4ece3b4b1701be894cd7c2e1 contains a CWE-835: Infinite loop vulnerability in pva format demuxer that can result in a Vulnerability that allows attackers to consume excessive amount of resources like CPU and RA...

CLEANSTART-2024-QS87229 FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asf_o format demuxer that can result in heap-buffer-overflow that may result in remote code...

Security vulnerability affects the ffmpeg4 package. FFmpeg before commit 2b46ebdbff1d8dec7a3d8ea280a612b91a582869 contains a Buffer Overflow vulnerability in asfo format demuxer that can result in heap-buffer-overflow that may result in remote code execution...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...

EUVD-2026-90453

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2024_6197)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20246197 advisory. ghostscript: format string injection leads to shell command execution SAFER bypass CVE-2024-29510 ghostscript: path traversal and command execution due to...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc (CENTOS8.4:CLSA-2026:1777641999)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1777641999 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and 6.9.13-40, a...

Rocky Linux 9 [CIQ] Security Update: python3-jinja2 (crlsa-2025_3406)

The Rocky Linux 9 host has a package installed that is affected by a vulnerability as referenced in the CIQ crlsa-20253406 advisory. jinja2: Jinja sandbox breakout through attr filter selecting format method CVE-2025-27516 Tenable has extracted the preceding description block directly from the CI...