1258 matches found
xperia_5_bl_unlocker_poc
Can't use as is, since memory address maybe different for each device This is for archival purposes...
CVE-2025-22457-vulnserver-lab
step 1 environment setting Permissions & execution script If you are using Windows, you can open WSL to execute it. chmod +x setupenvironment.sh ./setupenvironment.sh step 2: Finding dynamic values manual steps required Since memory addresses and IPs are dynamic in different environments, you nee...
CLEANSTART-2023-KF11060 invalid memory address dereference was discovered in the hf_assembly function of libfaad/sbr_hfadj
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the hfassembly function of libfaad/sbrhfadj...
CLEANSTART-2023-YY56914 invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec...
CLEANSTART-2023-LS66031 invalid memory address dereference was discovered in the lt_prediction function of libfaad/lt_predict
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the ltprediction function of libfaad/ltpredict...
CLEANSTART-2023-VH05257 invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the sbrprocesschannel function of libfaad/sbrdec...
CLEANSTART-2023-XG43309 invalid memory address dereference was discovered in the huffcode function (libfaac/huff2
Security vulnerability affects the faac package. An invalid memory address dereference was discovered in the huffcode function libfaac/huff2...
Rocky Linux 9 [CIQ] Security Update: rubygem-mysql2 / rubygem-mysql2-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3671)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243671 advisory. ruby: Buffer overread vulnerability in StringIO CVE-2024-27280 ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Arbitrary memory...
Rocky Linux 8 [CIQ] Security Update: ruby / ruby-debuginfo / ruby-debugsource / ruby-default-gems / etc Multiple Vulnerabilities (crlsa-2024_3500)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243500 advisory. ruby/cgi-gem: HTTP response splitting in CGI CVE-2021-33621 ruby: ReDoS vulnerability in URI CVE-2023-28755 ruby: ReDoS vulnerability in Time CVE-2023-2875...
Rocky Linux 9 [CIQ] Security Update: rubygem-mysql2 / rubygem-mysql2-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3668)
The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243668 advisory. ruby: Buffer overread vulnerability in StringIO CVE-2024-27280 ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Arbitrary memory...
Rocky Linux 8 [CIQ] Security Update: ruby / ruby-bundled-gems / ruby-bundled-gems-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_3670)
The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243670 advisory. ruby: Buffer overread vulnerability in StringIO CVE-2024-27280 ruby: RCE vulnerability with .rdocoptions in RDoc CVE-2024-27281 ruby: Arbitrary memory...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Avoid truncating memory addresses. On 32-bit machines with CONFIGARMLPAE, it is possible for lowmem allocations to be backed by addresses located physically beyond the 32-bit address limit. This issue was...
CVE-2026-72402
A flaw was found in the Linux kernel's BPF Berkeley Packet Filter verifier logging mechanism. The printbpfinsn function, responsible for masking sensitive pointer values in verifier logs, did not correctly mask all pseudo-pointer types. This oversight could lead to kernel memory addresses being...
CVE-2026-72045
A flaw was found in the Linux kernel component octeontx2-af. A local attacker with access to a Virtual Function VF could exploit an unsanitized input in the rvumboxhandlerlmtsttblsetup function. This vulnerability allows the VF to read the physical base address of another function's LMTLINE, whic...
EUVD-2026-59486
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Clear variable event pointer on read sndseqread copies a queued variable-length event header to userspace before expanding the payload. Queued variable-length events use SNDRVSEQEXTCHAINED internally, and data.ext.ptr...
CVE-2026-68454
A flaw was found in the KVM Kernel-based Virtual Machine subsystem of the Linux kernel, affecting the s390 PCI implementation. When a guest operating system registers interrupt requests IRQs without a specific summary bit, the system incorrectly stores an invalid memory address. This improper...
CVE-2026-49746 GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
Software installed and run as a non-privileged user may conduct improper GPU system calls to cause OOB read kernel memory access and in certain cases cause GPU UAF of arbitrary pages. Incorrect validation of array index can lead to OOB read and potentially to GPU UAF of arbitrary pages...
PT-2026-81366
Name of the Vulnerable Software and Affected Versions rclone versions prior to 1.75.0 Description The RC API includes full Go stack traces in error responses when panics occur. This allows attackers to trigger panics to leak sensitive information, including internal file paths, module versions,...
