Lucene search
+L

13499 matches found

Kitploit
Kitploit
•added 2026/09/27 3:51 p.m.•15 views

CVE-2022-0778

CVE-2022-0778 The discovered vulnerability triggers an infinite loop in the function BNmodsqrt of OpenSSL while parsing an elliptic curve key. This means that a maliciously crafted X.509 certificate can DoS any unpatched server. The core of the vulnerability is in the parsing of EC keys with poin...

7.5CVSS7AI score0.73188EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/09/27 1:05 p.m.•10 views

CVE-2024-44337

CVE-2024-44337 The package "github.com/gomarkdown/markdown" is a Go library for parsing Markdown text and rendering it as HTML. In pseudo-version 'v0.0.0-20240729232818-a2a9c4f' corresponding to commit 'a2a9c4f76ef5a5c32108e36f7c47f8d310322252' and earlier, there is a logic issue in the paragraph...

5.1CVSS6.5AI score0.00506EPSS
SaveExploits1
Kitploit
Kitploit
•added 2026/09/27 4:00 a.m.•14 views

dsa

A Summary of Go's crypto/dsa Vulnerability CVE-2016-3959 Alex Mullins April 9, 2016 Introduction Recently, there was a bug discovered in the Digital Signature Algorithm DSA crypto library for the Go programming language. In this article we'll go over the details of the bug and how an attacker cou...

7.5CVSS7AI score0.04419EPSS
SaveExploits0
Kitploit
Kitploit
•added 2026/09/25 7:41 p.m.•10 views

CVE-2022-0778

CVE-2022-0778 貢献者 정준수@jeongjunsoo 概要 CVE-2022-0778脆弱性は、OpenSSLで素数の平方根を計算するBNmodsqrt関数に影響を与えます。 この関数が素数ベースでない悪意を持って操作された証明書を処理するとき、パッチ未適用のサーバーはDoS攻撃にさらされる可能性があります。 対象 OpenSSL 1.0.2 OpenSSL 1.1.1 OpenSSL 3.0 パッチ前 root@kitploit: i = 1; if !BNmodsqrt, b, p, ctx goto end; while !BNisonet i++; if i == ...

7.5CVSS7.2AI score0.73188EPSS
SaveExploits2References1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/09/25 3:56 p.m.•9 views

Security Bulletin: The Pre-Validation App for IBM QRadar SIEM contains components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that could be identified and exploited with automated tools. Pre-Validation App for IBM QRadar SIEM has addressed the applicable CVEs in an update. Vulnerability Details CVEID:CVE-2026-33750 DESCRIPTION: The...

9.4CVSS5.6AI score0.01769EPSS
SaveExploits9Affected Software1
OSV
OSV
•added 2026/09/25 11:17 a.m.•5 views

AZL-104286 CVE-2026-97900 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

5.8AI score0.00168EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/25 11:17 a.m.•7 views

CVE-2026-97546

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

0.002EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/09/25 10:22 a.m.•5 views

EUVD-2026-86754

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

5.8AI score0.00168EPSS
SaveExploits0References4
CVE
CVE
•added 2026/09/25 10:22 a.m.•11 views

CVE-2026-97900

The Linux kernel contains a vulnerability in the drm/drm_exec component where drm_exec_prepare_array() fails to call drm_exec_lock_contended() when num_objects is zero. This oversight breaks the locking invariant required by drm_exec_lock_obj() . Specifically, drivers that chain multiple calls, s...

5.8AI score0.00168EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 10:22 a.m.•6 views

CVE-2026-97900 drm/drm_exec: fix up contended obj when num_objects is 0

In the Linux kernel, the following vulnerability has been resolved: drm/drmexec: fix up contended obj when numobjects is 0 drmexecpreparearray silently returns success without calling drmexeclockcontended when numobjects is zero. This breaks the invariant upheld by drmexeclockobj, where every ent...

5.8AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/09/25 10:21 a.m.•6 views

EUVD-2026-86854

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

5.8AI score0.002EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/25 10:21 a.m.•8 views

CVE-2026-97546 xfs: don't spin forever on zero-length dirents when salvaging them

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

5.8AI score
SaveExploits0References7
Kitploit
Kitploit
•added 2026/09/25 7:09 a.m.•11 views

cve-2021-45046

log4j RCE CVE-2021-44228 已在 2.15 版本中修复,但新发现了 CVE-2021-45046(引发 DoS)漏洞。 以下是测试结果。 测试环境 log4j-2.15.0 api, core JRE-1.8.0 jdk1.8.0151 Eclipse IDE Maven Project 1. Log4j RCE CVE-2021-44228 语法测试 - 无漏洞 2. 插入任意 ctx 对象名 - 无漏洞 3. 插入与接收 context 的对象相同名称 - 无限循环导致 DoS 4. 以 $jndi:ldap://127.0.0.1ldap 服务器地址 形式插入...

10CVSS7.4AI score0.99999EPSS
SaveExploits377
OSV
OSV
•added 2026/09/25 12:00 a.m.•6 views

UBUNTU-CVE-2026-97546

In the Linux kernel, the following vulnerability has been resolved: xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that claims to have length zero. Fix that, and prevent the same thing fro...

5.8AI score0.002EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/09/25 12:00 a.m.•6 views

Linux Distros Unpatched Vulnerability : CVE-2026-97546

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xfs: don't spin forever on zero-length dirents when salvaging them LOLLM noticed that xrepdirrecoverdata can spin forever if it encounters an unused dirent that...

5.8AI score0.002EPSS
SaveExploits0References3
Kitploit
Kitploit
•added 2026/09/24 5:56 p.m.•11 views

jfrog-CVE-2023-43786-libX11_DoS

CVE-2023-43786 概念実証(Proof-of-Concept) 概要 これは、libX11 のサービス拒否(DoS)脆弱性 CVE-2023-43786 の概念実証(PoC)です。 この PoC は整数オーバーフローを引き起こし、無限ループを発生させます。 影響を受けるバージョンは、libX11 1.8.6 以下および libXpm 3.5.16 です。 詳細な理解のためには、付随するブログ記事をご覧ください。 依存関係 脆弱性のあるバージョンの libXpm と libX11 xpmutils がインストールされていること 使用方法 1. xpmutils...

7.8CVSS7.2AI score0.00461EPSS
SaveExploits1
OSV
OSV
•added 2026/09/24 5:17 p.m.•5 views

DEBIAN-CVE-2026-93828

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

5.9AI score0.00166EPSS
SaveExploits0References1
OSV
OSV
•added 2026/09/24 5:17 p.m.•6 views

AZL-103604 CVE-2026-93828 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: exfat: fix handling of damaged volume in exfatcreateupcasetable When the size of the upcase table is set to zero in the dentry for any reasone.g. corrupted media or misbehaving device, an integer overflow causes the module to loo...

5.8AI score0.00166EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/09/24 4:53 p.m.•16 views

CVE-2026-24688

CVE-2026-24688 - pypdf - 循環参照によるDoS脆弱性 このリポジトリには、CVE-2026-24688を発動させるための概念実証コードが含まれています。 概要 pypdfのアウトライン(ブックマーク)解析ロジックにおける重大なサービス拒否(DoS)脆弱性です。循環するアウトライン参照を含むPDFを処理すると、パーサーが無限ループに入り、メモリを継続的に割り当て続け、私のマシン(TM)では毎秒数百MBのメモリを消費し、最終的にシステム全体がクラッシュします。 これはアプリケーションのハングアップではなく、システムレベルのDoSです。 内容...

5.1CVSS5.7AI score0.00451EPSS
SaveExploits2
CVE
CVE
•added 2026/09/24 4:03 p.m.•13 views

CVE-2026-93828

A vulnerability exists in the Linux kernel 's exfat filesystem module. Specifically, the function exfat_create_upcase_table() can enter an infinite loop due to an integer overflow when the size of the upcase table is set to zero (e.g., due to corrupted media or a misbehaving device). The issue is...

5.8AI score0.00166EPSS
SaveExploits0References3
Rows per page
Query Builder