CVE-2026-24061

Эксплойт CVE-2026-24061 Telnet RCE — от SafeBreach Labs Этот скрипт эксплуатирует уязвимость CVE-2026-24061 в Telnet-серверах, используя некорректно сформированную переменную окружения USER. Использование Запустите скрипт с указанием целевого хоста: python telnetrce.py -p Аргументы host: IP-адрес...

CVE-2017-3881-exploit-cisco-

Уязвимость в коде обработки протокола управления кластерами Cisco CMP в программном обеспечении Cisco IOS и Cisco IOS XE может позволить неаутентифицированному удаленному злоумышленнику вызвать перезагрузку уязвимого устройства или удаленно выполнить код с повышенными привилегиями. Протокол...

CVE-2025-60751

CVE-2025-60751: Переполнение буфера на стеке в GeographicLib 📌 Этот репозиторий содержит анализ и техническую документацию уязвимости CVE-2025-60751 , ошибки переполнения буфера на стеке Stack-based Buffer Overflow, обнаруженной в библиотеке C++ GeographicLib. 📝 Описание Уязвимость находится в...

CVE-2023-40294-and-CVE-2023-40295

Пока я запускал boron в своей среде, я случайно обнаружил 2 переполнения буфера в куче в libboron libboron.so.2 версия 2.0.8 при обработке слегка некорректного ввода. Это было официально протестировано как на Mac x8664, так и на Linux x8664: Файлы для воспроизведения reproduction.zip Компиляция g...

CVE_2019_19844

djangocve201919844poc PoC pour CVE-2019-19844 Configuration 1. docker-compose run --service-ports web python manage.py migrate --no-input 2. docker-compose run --service-ports web python manage.py createsuperuser [email protected] --username 0xsha 3. Rendez-vous sur...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in Raptor2

A malformed input file can lead to a segfault due to an out of bounds array access in raptorxmlwriterstartelementcommon...

PoC-CVE-2025-69421

Reproducteur de plantage uniquement pour CVE-2025-69421 Ce dépôt contient un fichier PKCS12 malformé minimal qui reproduit CVE-2025-69421 dans un environnement de laboratoire isolé. Le PFX généré contient un EncryptedData dont le EncryptedContentInfo omet le champ optionnel encryptedContent. Les...

PYSEC-2026-4053 hpack: Unbounded variable integer decoding can cause run-away computation on malformed input

Impact Users of the python-hyper/hpack library, most commonly used as downstream dependency of the python-hyper/h2 library an HTTP/2 client and server implementation. Unbounded variable integer decoding can cause run-away computation on malformed input leading to On^2 runtime, effectively blockin...

AlmaLinux 9.2 [TuxCare] Security Update: poppler / poppler-cpp / poppler-cpp-devel / poppler-devel / etc (ALMALINUX9.2:CLSA-2025:1744631318)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744631318 advisory. - A flaw was found in the Poppler's Pdfinfo utility. This issue occurs when using -dests parameter with pdfinfo utility. By using certain...

CVE-2026-93749

A flaw was found in source-map-js. This vulnerability allows a remote attacker to trigger a denial of service by providing malformed input. Specifically, by supplying extremely large offset line values in indexed source maps, the attacker can cause the service's event loop to block, making it...

NPM: Svelte devalue: DoS via malformed input

NPM: Svelte devalue: DoS via malformed input vulnerability discovered by ? in WordPress Npm devalue versions 5.9.1...

EUVD-2026-79215

A vulnerability exists in the configuration processing logic of the affected component where malformed input is improperly processed. An authenticated remote attacker with administrative privileges could exploit this vulnerability by providing specially crafted configuration data. Successful...

EUVD-2026-79211

A vulnerability exists in the proxy packet processing logic of the affected component where it improperly processes malformed or truncated input. An unauthenticated remote attacker could exploit this vulnerability by providing specially crafted input that triggers an integer overflow. Successful...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: cifs: parsedfsreferrals: prevents out-of-bounds access on malformed inputs A malicious SMB server can send invalid responses to FSCTLDFSGETREFERRALS. - The response is smaller than sizeofstruct getdfsreferralrsp. - The number of...

Astra Linux – Vulnerability in CGal

There are multiple code execution vulnerabilities in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could result in code execution. An attacker can provide malicious input to trigger...

Astra Linux – Vulnerability in CGal

There is a code execution vulnerability in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1, specifically in the NefS2/SNCioparser.h file, within the SNCioParser::readsface and sfh-volume functions. A specially crafted, malformed file can lead to an out-of-bounds read and type...

Astra Linux – Vulnerability in Thunderbird

Ribose RNP before version 0.16.3 may hang when the input is malformed...

Astra Linux – Vulnerability in vorbis-tools

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package, within the remotethread function in remote.c. This vulnerability occurs during the remote control functionality, when processing malformed input, resulting in a stack buffer underflow...

Astra Linux – Vulnerability in Lasso

There is a denial-of-service vulnerability in the lassoproviderverifysamlsignature functionality of Entr’ouvert Lasso 2.5.1. A specially crafted SAML response can lead to a denial-of-service attack. An attacker can send a malformed SAML response to exploit this vulnerability...