174 matches found
CYBERDUDEBIVASH-MONGODB-DETECTOR-v2026
CYBERDUDEBIVASH MONGODB 检测工具 v2026.1 检测暴露的 MongoDB 实例和 CVE-2025-14847 "MongoBleed" 风险 — 零信任 Python 扫描器。 2026 年,配置不当的 MongoDB 数据库仍然是数据泄露和勒索软件攻击的主要原因之一。此工具帮助防御者识别开放端口、未认证访问以及潜在的堆泄漏漏洞。 功能特性 端口 27017 检测 未认证访问检查 CVE-2025-14847 MongoBleed PoC 检测 JSON 报告输出 详细模式实时反馈 100% 本地执行(无云端依赖) 使用方法 pip install...
CVE-2019-6207
CVE-2019-6207 getdirentriesattr kernel heap inofo leak Esta vulnerabilidad puede desencadenarse en el sandbox en macOS=10.14.4 && iOS 12.2 Actualizaré más detalles sobre esta vulnerabilidad...
ctl_ctloutput-leak
ctlctloutput-leak La función ctlctloutput en macOS High Sierra 10.13 ignora el valor de retorno de una llamada a sooptcopyin, lo que abre una ventana de carrera para filtrar datos no inicializados del heap del kernel al espacio de usuario. ctlctloutput-leak es un exploit de prueba de concepto que...
AlmaLinux 9.2 [TuxCare] Security Update: libpng / libpng-devel / libpng-static / libpng-tools (ALMALINUX9.2:CLSA-2026:1778891359)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1778891359 advisory. - LIBPNG is a reference library for use in applications that read, create, and manipulate PNG Portable Network Graphics raster image files...
PT-2026-102921
CVE advisory: CVE-2026-101303 - netapp: CVE-2026-101303 FreeBSD Vulnerability in NetApp Products. https://t.co/xyNSpbtc1N CVE CyberSecurity NetApp FreeBSD...
SUSE CVE-2026-90000
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
CVE-2026-93174
CVE-2026-93174 affects the Linux kernel BPF subsystem. In copy_map_value_long(), the function passes map->value_size to bpf_obj_memcpy() instead of the correctly padded round_up(map->value_size, 8). When a per-CPU map contains special fields, bpf_obj_memcpy() copies around those fields with...
AZL-101123 CVE-2026-90000 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
DEBIAN-CVE-2026-90000
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
CVE-2026-90000
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
DEBIAN-CVE-2026-89846
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Bound rspinfolen to avoid OOB sense-data read In qla2x00statusentry, the FWI2 status path advances sensedata and shrinks parsenselen by rspinfolen: if ISFWI2CAPABLEha sensedata += rspinfolen; parsenselen -=...
CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
EUVD-2026-80608
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
CVE-2026-90000 HID: rmi: fix OOB access with undersized RMI reports
In the Linux kernel, the following vulnerability has been resolved: HID: rmi: fix OOB access with undersized RMI reports The hid-rmi driver sizes its writeReport/readReport buffer purely from the report descriptor supplied by the device, with no minimum bound: data-inputreportsize =...
CVE-2026-89865 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers The FRU and I2C bsg handlers stage their transfer in a DMAPOOLSIZE 256-byte bounce buffer obtained from dmapoolalloc, which does not zero the allocation. They initialize...
AZL-101265 CVE-2026-89779 affecting package kernel for versions less than 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...
CVE-2026-89779
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...
UBUNTU-CVE-2026-89779
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...
CVE-2026-89779
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...
EUVD-2026-80300
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: validate ef-size covers the record's name and value When an EA record has a non-zero ef-size, ntfsreadea only checks that the record fits in the remaining buffer easize bytes, not that ef-size is large enough to hold th...