CVE-2026-19185: Untrusted Pointer Dereference

The system-call verifier for i3cdoccc in drivers/i3c/i3chandlers.c validated the outer struct i3ccccpayload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3cccctargetpayload carries its ow...

rndis-co

RNDIS-CO Краткое описание USB-гаджет RNDIS может быть использован для дампа содержимого адресного пространства ядра через механизм обновления пакетного фильтра. Описание Обработчик управляющего запроса USB RNDISMSGSET — rndissetresponse — вызывает genndissetresp, передавая указатель на буфер,...

CVE-2022-41741-742-Nginx-Vulnerability-Scanner

🛡️ Nginx Vulnerability Scanner Разработано m10sec. Этот скрипт автоматически определяет версию Nginx на удаленном сервере и оценивает, уязвим ли он для известных уязвимостей безопасности, а именно: CVE-2023-44487 – HTTP/2 Rapid Reset Attack CVE-2022-41741 – Повреждение памяти в ngxhttpmp4module...

CVE-2014-0160.

CVE-2014-0160 Лаборатория по созданию экспериментальной среды с использованием Heartbleed для утечки памяти веб-приложений Этот репозиторий посвящен созданию контейнера для создания среды, в которой можно эксплуатировать nginx с помощью техники Heartbleed, с акцентом на: Создание среды с...

cve-2025-5915

CVE-2025-5915 — переполнение кучи при чтении в RAR v4 в libarchive с доказательством на устройстве iOS 18.5 Контролируемое чтение за пределами кучи / раскрытие памяти в пути фильтра RAR v4 в libarchive copyfromlzsswindow. Этот репозиторий воспроизводит проблему полностью: локальный ASan, написанн...

CVE-2025-14847

CVE-2025-14847 MongoBleed 📜 Описание Этот скрипт предназначен для эксплуатации уязвимости раскрытия памяти кучи , известной как CVE-2025-14847 "MongoBleed", в MongoDB Server. Отправляя специально сформированные сжатые с помощью zlib пакеты OPMSG с завышенной длиной документа, скрипт заставляет...

CentOS Linux 8 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1790933563)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1790933563 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

HDF5 <= 2.2.0 Multiple Vulnerabilities

The version of HDF5 installed on the remote host is 2.2.0 or earlier. It is, therefore, affected by multiple vulnerabilities: - H5Zfilternbit in H5Znbit.c dereferences cdvalues0 through cdvalues4 without validating that cdvalues is non-NULL or that cdnelmts is at least 5, the fixed size of the...

kernel security, bug fix, and enhancement update

6.12.0-211.60.1 - Add new Oracle Linux Driver Signing key 1 certificate Orabug: 37985782 - Disable UKI signing Orabug: 36571828 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

CentOS Linux 8.4 [TuxCare] Security Update: openssl / openssl-devel / openssl-libs / openssl-perl / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1790933443)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1790933443 advisory. - Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when...

CVE-2026-13043

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CVE-2026-13043 WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-90898

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

EUVD-2026-83362

devalue: stringify/uneval serialize shared memory...

PT-2026-103920

Name of the Vulnerable Software and Affected Versions WatchGuard endpoint security products affected versions not specified Description A missing authentication issue in the Kernel Memory Access Driver PSKMAD allows a local, authenticated attacker to bypass the access-control handshake. This...

CVE-2026-13043: Missing Authentication for Critical Function

A missing authentication vulnerability in the Kernel Memory Access Driver PSKMAD used by WatchGuard endpoint security products allows a local, authenticated attacker to bypass the driver's access-control handshake and issue arbitrary privileged commands to the driver, resulting in disclosure of...

CentOS Linux 6 [TuxCare] Security Update: rsync Multiple Vulnerabilities (CENTOS6:CLSA-2026:1779824462)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1779824462 advisory. - Rsync versions before 3.4.3 contain a time-of-check to time-of-use TOCTOU race condition in daemon file handling that allows attackers...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2023_7884)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20237884 advisory. postgresql: Buffer overrun from integer overflow in array modification CVE-2023-5869 postgresql: Memory disclosure in aggregate function calls CVE-2023-586...

Rocky Linux 8 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc Multiple Vulnerabilities (crlsa-2021_5236)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20215236 advisory. postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Tenable...

Rocky Linux 8 [CIQ] Security Update: postgresql / postgresql-contrib / postgresql-contrib-debuginfo / etc Multiple Vulnerabilities (crlsa-2021_2361)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212361 advisory. postgresql: Buffer overrun from integer overflow in array subscripting calculations CVE-2021-32027 postgresql: Memory disclosure in INSERT ... ON CONFLICT...