188414 matches found
Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP5 kernel was updated to fix various security issues: The following security issues were fixed: CVE-2024-57841,CVE-2026-53260: net: fix memory leak in tcpconnrequest bsc1235944 bsc1269731. CVE-2026-23451: bonding: prevent potential infinite loop in bondheaderparse...
CVE-2026-98370
A flaw was found in the Linux kernel's IPsec Internet Protocol Security subsystem. A local attacker can exploit this issue by submitting 32-bit compatibility requests, which triggers a race condition during message translation. This flaw leads to a use-after-free condition, potentially allowing a...
CVE-2026-98368
A flaw was found in the Linux kernel's IPsec Encapsulating Security Payload ESP subsystem. When transmitting network packets using zero-copy operations on out-of-place paths, the kernel modifies packet fragment structures without properly updating reference counts for managed memory pages. A loca...
CVE-2026-98367
A flaw was found in the Linux kernel's Remote Direct Memory Access RDMA Soft-iWARP siw driver. A race condition occurs during connection handling if modifying a queue pair fails, releasing an internal lock before error cleanup completes. A local attacker could exploit this timing window through...
CVE-2026-98180
A flaw was found in the Linux kernel's Direct Rendering Manager DRM MSM driver. When ring buffer or virtual memory objects containing a GPU scheduler are freed, synchronization fences exported to user space continue to reference the deallocated scheduler memory. A local unprivileged attacker can...
CVE-2023-25136-PoC
استغلال ثغرة CVE-2023-25136 يوفر هذا المشروع بيئة اختبار محلية مصغرة لاستغلال ثغرة تدمير الذاكرة المزدوجة double free في مرحلة ما قبل المصادقة في OpenSSH 9.1p1 CVE-2023-25136 ، ومراقبة تأثير تعطل خدمة الخادم DoS. ملاحظة: تتفق التحليلات الرسمية والرئيسية على أنه من "الصعب جدًا استغلال هذه الثغرة...
CVE-2020-0674
CVE-2020-0674 CVE-2020-0674 هي ثغرة من نوع use-after-free في محرك jscript القديم. يمكن استغلالها في إنترنت إكسبلورر. هذا الاستغلال من كتابة maxpl0it لكن الثغرة نفسها اكتشفتها Qihoo 360 وقد كانت تُستخدم في البرية. هذا الاستغلال يقوم ببساطة بتشغيل الآلة الحاسبة calc. يمكن العثور على شرح الاستغلال...
PFQ
PFQ v6.2 परिचय PFQ एक कार्यात्मक ढाँचा फंक्शनल फ्रेमवर्क है जो लिनक्स ऑपरेटिंग सिस्टम के लिए डिज़ाइन किया गया है, जो कुशल पैकेट कैप्चर/ट्रांसमिशन 10G, 40G और उससे अधिक, इन-कर्नेल कार्यात्मक प्रसंस्करण, कर्नेल-बाइपास और सॉकेट/एंड-प्वाइंट के समूहों में पैकेट स्टीयरिंग के लिए बनाया गया है। यह...
EUVD-2026-95011
ImageMagick before 6.9.13-55 and 7.x before 7.1.2-30 contains a use-after-free vulnerability in the RSVG decoder when built without cairo support, triggered when a limit is hit during decoding. Attackers can supply crafted SVG files that cause a limit to be reached, leading to access of freed...
CVE-2026-105824
Removed by vendor...
CVE-2026-105824
The ImageMagick software contains a use-after-free vulnerability in the RSVG decoder when compiled without Cairo graphics library support . The flaw is triggered during image processing when a decoding limit is reached, allowing a remote attacker to provide a specially crafted Scalable Vector Gra...
EUVD-2026-95009
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
A flaw exists in ImageMagick before versions 6.9.13-56 and 7.x before 7.1.2-31 . A remote attacker can exploit an invalid memory free vulnerability in the MVG decoder by supplying a specially crafted Magick Vector Graphics (MVG) image for processing. This triggered condition crashes the applicati...
CVE-2026-105405 ImageMagick before 7.1.2-31 Invalid Memory Free in MVG Decoder
ImageMagick before 6.9.13-56 and 7.x before 7.1.2-31 contains an invalid memory free vulnerability in the MVG decoder. Attackers can supply a crafted MVG image for processing to trigger the invalid free and crash the application, causing a denial of service...
CVE-2026-105405
Removed by vendor...
EUVD-2026-94994
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...
CVE-2026-14508 IBM DataPower Gateway Use After Free
IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service and obtain sensitive information due to a use-after-free...
CVE-2026-14508
The IBM DataPower Gateway is vulnerable to a use-after-free condition (CWE-416) that could allow a remote attacker to cause a denial of service and obtain sensitive information . Affected versions include 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 ...