CVE-2022-25636

CVE-2022-25636 Escalada de privilegios en netfilter del kernel toc Resumen de la vulnerabilidad ID de vulnerabilidad: CVE-2022-25636 Producto afectado: linux kernel - netfilter Versiones afectadas: linux kernel 5.4 Impacto: el módulo del kernel netfilter contiene una escritura fuera de límites en...

CVE-2022-0995

CVE-2022-0995 Exploit para CVE-2022-0995. Utiliza escritura fuera de los límites del heap en el componente watchqueue del kernel de Linux. Técnica similar descrita en esta investigación https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. Exploit probado en Ubuntu...

CVE-2026-85769

CVE-2026-85769 Heap out-of-bounds read in libtpms TPM 2.0 volatile-state deserialization. An unbounded optional-block skip in blockskipread advances the unmarshal cursor by an attacker-controlled 16-bit length and drives the signed remaining-size counter negative. Every downstream bounds check th...

SUSE SLED15 / SLES15 Security Update : alloy (SUSE-SU-2026:4408-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4408-1 advisory. - CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error...

CVE-2021-22555-Poc

Desbordamiento de montón CVE CVE-2021-22555 Lista de errores Escritura fuera de los límites del montón El error principal Corrupción de datos El efecto inmediato Fuga de memoria / Divulgación de información Escalada de privilegios El objetivo final 1. Instalar herramientas de compilación NO...

CVE-2021-44142

Comprobador de vulnerabilidad CVE-2021-44142 Una herramienta para comprobar si un servidor Samba es vulnerable a CVE-2021-44142 Antecedentes CVE-2021-44142 es una lectura y escritura fuera de los límites del montículo en el módulo vfsfruit de Samba, utilizada en Pwn2Own Austin 2021 contra el...

CVE-2026-7482

CVE-2026-7482: Reproducción de lectura fuera de límites Heap OOB en GGUF de Ollama Este repositorio contiene mi script de reproducción local para CVE-2026-7482, una lectura fuera de límites en el montón heap out-of-bounds read en las rutas vulnerables de carga y cuantización de GGUF de Ollama. El...

Samba-CVE-2021-44142

CVE-2021-44142 Vulnerability Checker A tool to check if a Samba server is vulnerable to CVE-2021-44142 Background CVE-2021-44142 is a heap out-of-bounds read and write in Samba's vfsfruit module used at Pwn2Own Austin 2021 against the Western Digital PR4100. It was first discovered by Nguyễn Hoàn...

CVE-2026-42533-nginx

CVE-2026-42533 nginx Este repositorio contiene un escáner basado en Go para identificar patrones de configuración de nginx asociados con el problema de captura-sobrescritura de dos pasos de complexvalue descrito en CVE-2026-42533. Descripción general La herramienta analiza archivos y directorios ...

CVE-2026-103678

A heap out-of-bounds read vulnerability exists in tnef within the get_rtf_data_from_buf() function. The flaw is caused by a failure to properly validate input buffer boundaries when processing uncompressed Rich Text Format (RTF) data. An attacker can exploit this by providing a specially crafted ...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

CVE-2026-103678 Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via uncompressed rtf mapi value

A flaw was found in tnef. An attacker can exploit this vulnerability by providing a specially crafted file containing uncompressed Rich Text Format RTF data. Because the application fails to properly validate input buffer boundaries before copying data in getrtfdatafrombuf, reading beyond the...

Security update for alloy

This update for alloy fixes the following issues: CVE-2026-2303: go.mongodb.org/mongo-driver: mongo-go-driver has Heap Out-of-Bounds Read in GSSAPI Error Handling bsc1269861. CVE-2026-37236: github.com/grpc-ecosystem/grpc-gateway/v2/runtime: client can override the HTTP method of a POST request...

Rocky Linux 9.6 [TuxCare] Security Update: libssh / libssh-config / libssh-devel (ALMALINUX9.6:CLSA-2026:1776178207)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776178207 advisory. - A flaw was found in libssh in which a malicious SFTP SSH File Transfer Protocol server can exploit this by sending a malformed 'longname'...

Rocky Linux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776873238)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776873238 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper...

AlmaLinux 9.6 [TuxCare] Security Update: gawk / gawk-all-langpacks / gawk-devel / gawk-doc (ALMALINUX9.6:CLSA-2026:1777030298)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1777030298 advisory. - A heap out-of-bounds read flaw was found in builtin.c in the gawk package. This issue may lead to a crash and could be used to read sensiti...

AlmaLinux 9.2 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1778236507)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778236507 advisory. - A flaw was found in rsync. It could allow a server to enumerate the contents of an arbitrary file from the client's machine. This...

AlmaLinux 9.6 [TuxCare] Security Update: bsdcat / bsdcpio / bsdtar / libarchive / libarchive-devel (ALMALINUX9.6:CLSA-2026:1776873238)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1776873238 advisory. - A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper...

Rocky Linux 8 [CIQ] Security Update: wavpack / wavpack-debuginfo / wavpack-debugsource / wavpack-devel (crlsa-2022_7558)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227558 advisory. wavpack: Heap out-of-bounds read in WavpackPackSamples CVE-2021-44269 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 9 [CIQ] Security Update: gstreamer1-plugins-bad-free / gstreamer1-plugins-bad-free-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_55865)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655865 advisory. gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder CVE-2026-19387 gstreamer:...