Oracle Linux 10 : kernel (ELSA-2026-71602)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-71602 advisory. - pppoe: reload header pointer after devhardheader Guillaume Nault RHEL-242509 CVE-2026-68121 - nvme-tcp: fix host memory disclosure on R2T for a rea...

rndis-co

RNDIS-CO 概述 RNDIS USB Gadget 可能被利用，通过数据包过滤器更新机制 转储内核内存空间的内容。 描述 RNDISMSGSET USB 控制传输请求处理程序 - rndissetresponse 调用 genndissetresp，传入的缓冲区指针偏移量为 BufOffset + 8。 BufOffset 变量从 RNDIS 消息中获取，并且未经验证 以遵守缓冲区边界。因此，通过操纵四个字节的 rndissetmsgtype 的 InformationBufferOffset 成员，攻击者可以 将实际缓冲区偏移最多 0xffffffff 字节。 rndis.c -...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner 由 m10sec 开发。 该脚本自动检测远程服务器上的 Nginx 版本，并评估其是否受到已知安全漏洞的影响，具体包括： CVE-2023-44487 – HTTP/2 Rapid Reset 攻击 CVE-2022-41741 – ngxhttpmp4module 中的内存破坏 CVE-2022-41742 – ngxhttpmp4module 中的内存泄露 🚀 功能特性 提示用户输入要分析的服务器 URL 或 IP。 检测服务器是否正在使用 Nginx 并提取其版本。 检查 ngxhttpmp4module 模块是否启用。...

CVE-2014-0160.

CVE-2014-0160 Laboratorio para montar un laboratorio usando Heartbleed para filtrar memoria de aplicaciones web Este repositorio se centra en construir un contenedor para crear un entorno fácil de explotar nginx utilizando la técnica Heartbleed, enfocándose en: Montar el entorno usando Docker...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 堆越界读取（含 iOS 18.5 真机验证） libarchive 的 RAR v4 过滤器路径（copyfromlzsswindow）中存在可控的堆越界读取 / 内存泄露 。本仓库端到端复现了该漏洞：本地 ASan、一个从零编写的 RAR v4 编码器（可调节泄露大小），以及 iOS 18.5 上的真机 演示（使用手机自带的系统 libarchive.2.dylib）。 漏洞 ：parsefilter 读取过滤器 blocklength（RAR-VM 字节码，最多 32 位），随后 copyfromlzsswindow...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 描述 此脚本旨在利用 MongoDB 服务器中被称为 CVE-2025-14847 （"MongoBleed"）的 堆内存泄露漏洞 。通过发送特制的经 zlib 压缩的 OPMSG 数据包，并带有膨胀的文档长度，该脚本欺骗服务器在其响应中返回未初始化的堆内存。这可能会泄露敏感信息，例如： 脚本持续发送带有不同偏移量的探测，并实时打印 新观察到的泄露字符串 。它抑制重复项以保持输出清晰可读。 致谢 Joe Desimone 的原始 PoC 对定义的偏移范围执行单次遍历 ，收集所有唯一片段，保存到文件，并可选择在最后高亮有趣的模式。...

CentOS Linux 8 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790933563)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790933563 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790933443)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790933443 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

HDF5 <= 2.2.0 Multiple Vulnerabilities

The version of HDF5 installed on the remote host is 2.2.0 or earlier. It is, therefore, affected by multiple vulnerabilities: - H5Zfilternbit in H5Znbit.c dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the...

kernel security, bug fix, and enhancement update

6.12.0-211.60.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-90898

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-83362

devalue: stringify/uneval serialize shared memory...

PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

CVE-2026-13043: Missing Authentication for Critical Function

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779824462)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779824462 advisory. - Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2023_7884)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237884 advisory. postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-586...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2021_5236)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20215236 advisory. postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Tenable...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_2361)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212361 advisory. postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 postgresql: Memory disclosure in INSERT ... ON CONFLICT...