1430 matches found
CVE-2019-16279
CVE-2019-16279 （CVE-2019-16279）DoS このバグは、単一の接続で \r\n を過剰に送信した際に発生するメモリエラーを悪用します。 使用例 $ curl http://127.0.0.1:8080 HELLO! $ ./CVE-2019-16279.sh 127.0.0.1 8080 $ curl http://127.0.0.1:8080 curl: 7 Failed to connect to 127.0.0.1 port 8080: Connection refused...
wotop
Web-On-Top-Of-Protocol WOTOP root@kitploit: ██╗ ██╗ ██████╗ ████████╗ ██████╗ ██████╗ ██║ ██║██╔═══██╗╚══██╔══╝██╔═══██╗██╔══██╗ ██║ █╗ ██║██║ ██║ ██║ ██║ ██║██████╔╝ ██║███╗██║██║ ██║ ██║ ██║ ██║██╔═══╝ ╚███╔███╔╝╚██████╔╝ ██║ ╚██████╔╝██║ ╚══╝╚══╝ ╚═════╝ ╚═╝ ╚═════╝ ╚═╝ Introduction WOTOP is a...
Astra Linux – Vulnerability in libxml2
In libxml2 versions before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API Python bindings due to an incorrect return value. This issue occurs in the xmlPythonFileRead and xmlPythonFileReadRaw functions, caused by a discrepancy between bytes and characters...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Handle errors from amdgpucgscreatedevice in amdpowerplaycreate. Add error handling to propagate the failures of amdgpucgscreatedevice to the caller. When amdgpucgscreatedevice fails, release hwmgr and return -ENOMEM t...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerabilities have been resolved: tools/nolibc/stdlib: fixed a memory error in realloc Pass userplen to memcpy, instead of heap-len, to prevent realloc from copying an extra sizeofheap bytes beyond the allocated region...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-usb: Fix an NULL vs ISERR bug The qmpusbiomap helper function currently returns the raw result of devmioremap for non-exclusive mappings. Since devmioremap may return a NULL pointer, and the caller only checks error...
CVE-2026-78546
CVE-2026-78546 is an Out-of-Bounds Read (CWE-125) in the Citrix Workspace app for Windows . It requires local access and low privileges, with no user interaction needed. The CVSS v4.0 base score is 4.8 (Medium) , reflecting low impacts to both confidentiality and availability. Affected versions i...
CVE-2026-87460
An use after free flaw was found in the Platform component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=540058837...
firefox: thunderbird: Use-after-free in the Layout: Text and Fonts component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Layout: Text and Fonts component...
Linux Distros Unpatched Vulnerability : CVE-2026-80179
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed...
PT-2026-82800
Name of the Vulnerable Software and Affected Versions jwcrypto affected versions not specified Description A flaw allows a remote attacker to cause a denial of service DoS by sending a specially crafted JSON Web Encryption JWE token containing numerous period delimiters. This malformed token forc...
The vulnerability of the function ieee80211_parse_adv_t2l() in the module net/mac80211/mlme.c of the mac80211 stack in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the function ieee80211parseadvt2l in the net/mac80211/mlme.c module of the mac80211 stack in the Linux operating system is related to incorrect assumptions regarding the organization of data or memory. Exploiting this vulnerability could allow a remote attacker to compromise...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: Wifi: ath9k: Fixed a potential stack-out-of-bounds write in ath9kwmirspcallback. This bug involves writing to wmi-cmdrspbuf, a stack-allocated buffer that may become invalid when a timeout occurs. Set wmi-lastseqid to 0 when a...
Astra Linux – Vulnerability in Firefox and Thunderbird
When calling JS::CheckRegExpSyntax, a syntax error may be set, resulting in the call to convertToRuntimeErrorAndClear. A path within the function might attempt to allocate memory when no memory is available, causing a newly created Out of Memory exception to be misinterpreted as a syntax error...
Astra Linux – Vulnerability in Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: EDAC/mc: Fixed the error path ordering in edacmcalloc. When the mci-pvtinfo allocation in edacmcalloc fails, the error path will call putdevice, which will ultimately call the device’s release function. However, the initializatio...
Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: Bonding: Limit BONDMODE8023AD to Ethernet devices. BONDMODE8023AD is meaningful only for ARPHRDETHER. syzbot reported: BUG: KASAN: Global-out-of-bounds in hwaddrcreate net/core/devaddrlists.c:63 inline BUG: KASAN:...
Astra Linux – Vulnerability in Chromium
In V8 of Google Chrome, out-of-bounds memory access prior to version 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write operations through a crafted HTML page. Chromium security severity: High...
CVE-2026-72368
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomemdalloc error path When startcreating fails and returns -ENOMEM, it has already released the parent directory lock in startdirop: static struct dentry startdirop... ... inodelocknesteddir,...
CVE-2026-72363
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio needs to be redirtied and unlocked before the terminal writebackiter...
EUVD-2026-59267
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix double unlock in nomemdalloc error path When startcreating fails and returns -ENOMEM, it has already released the parent directory lock in startdirop: static struct dentry startdirop... ... inodelocknesteddir,...