CVE-2026-56848

CVE-2026-56848 NVD 説明 Node.js の HTTP/2 処理における欠陥により、nghttp2sessionmemrecv の実行中に nghttp2sessionmemsend が再入的に呼び出され、ヒープ使用後解放（heap-use-after-free）が発生する可能性があります。 この脆弱性は、Node.js 26.x、24.x、および 22.x に影響します。 注: 説明に記載されているバージョンは、上流の nodejs パッケージにのみ適用され、Alpine が配布している nodejs パッケージには適用されません。 リリースライン|...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14는 Heap-Buffer-Overflow 및 Heap-Use-After-Free 취약점에 노출됩니다. 2.7.14 이전 버전의 Python도 취약할 수 있으며, Python 2.7.17 및 이전 버전도 취약할 수 있지만 이는 확인되지 않았습니다. ERRASANTHREADC18...

CVE-2020-9273

CVE-2020-9273 이것들은 제가 CVE-2020-9273 - ProFTPd의 힙 use-after-free 취약점 분석 및 익스플로잇 과정에서 생성한 파일들입니다. 익스플로잇 비디오를 여기에서 확인하세요. 이 리포지토리의 파일들에 대한 설명: poc-not-really-v4.c - 작년2020년 10월에 작성한 글과 PoC입니다. 익스플로잇 경로를 이해하기 위해 읽어보세요. exploitdemo.c - 작년에 공개된 데모 익스플로잇으로, 하드코딩된 주소가 포함되어 있습니다. exploitproftpd.c - 신뢰할...

DEBIAN-CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

The m17n-lib library contains a heap use-after-free write vulnerability in the re_init_ic() function. A user providing specially crafted text input can trigger this condition during input-method state transitions , where the library frees an internal input context object but subsequently attempts...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-107167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

teamspeak3-vulnerabilities

TeamSpeak 3 서버 - 개념 증명 익스플로잇 이 저장소에는 TeamSpeak 3 서버3.13.7에서 발견된 세 가지 취약점CVE-2026-4390, CVE-2026-4391 및 CVE-2026-4392에 대한 개념 증명 코드가 포함되어 있습니다. 모든 발견 사항은 TeamSpeak에 책임감 있게 공개되었으며, 당사의 보안 권고에 게시되었습니다. 힙 use-after-free 취약점CVE-2026-4390에 대한 자세한 기술 문서는 제 블로그 게시물을 참조하십시오. 면책 조항 이 코드는 교육 및 연구 목적으로만 제공됩니다...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib 25.11.90 이전 버전은 Google Safe Browsing Lookup API일명 피싱 API에서 threatMatches:find에 대한 SSL 오류를 무시하며, 이로 인해 ...이가 허용될 수 있습니다. 2. CVE-2025-69413 - Gitea 1.25.2 이전 버전에서 /api/v1/user는 사용자 이름이 존재하는지 여부에 따라 인증 실패에 대해 서로 다른 응답을 반환합니다. 3. CVE-2025-13820 - Comments WordPress...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim ヒープ UAF からリモート root へ CVSS 9.8 Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS ビルド | 認証不要 GDB トレース、ステップバイステップ解析、全世界の露出データを含む完全な解説: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 概要 Exim が BDAT ボディ転送の最中に TLS closenotify アラートを送信すると、tlsclose が...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1775669370)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1775669370 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and...

Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_61383)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via HTTP...