dubiousdisk

dubious disk - secure boot에 매우 효과적인 포리곤-Z! CVE-2022-30203, CVE-2023-21560, CVE-2023-28269, CVE-2023-28249, 그리고 더... Windows 부팅 환경의 과도하게 허용적인 코드로 인해 임의의 메모리를 덮어쓸 수 있으며, 따라서 임의의 코드 실행이 가능합니다. Exploitro는 Field-FX 2024 와일드 컴포에서 3위를 차지했습니다. 코드: Rairii 엔진 코드: NoNameNo XM 플레이어: a1k0n 리메이크된 TopazPlus 폰트:...

CVE-2021-23017-POC

CVE-2021-23017-POC nginx 리졸버에서 보안 문제가 확인되었습니다. 이 문제는 DNS 서버로부터 UDP 패킷을 위조할 수 있는 공격자가 1바이트 메모리 덮어쓰기를 유발하여 작업자 프로세스 충돌 또는 기타 영향을 초래할 수 있습니다. 이 문제는 구성 파일에서 "resolver" 지시문이 사용되는 경우에만 nginx에 영향을 미칩니다. 또한, 공격은 공격자가 DNS 서버로부터 UDP 패킷을 위조할 수 있는 경우에만 가능합니다...

EUVD-2026-91024

RT-Labs AB C-Open CANopen contains a write protection bypass in the SDO Service Data Object server implementation 'src/cosdoserver.c' that fails to properly validate write permissions when processing download-segment frames. An unauthenticated attacker on the CAN bus can initiate an SDO upload fo...

AlmaLinux 9.2 [TuxCare] Security Update: libpq / libpq-devel Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1785316580)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1785316580 advisory. - In PostgreSQL, a modified, unauthenticated server can send an unterminated string during the establishment of Kerberos transport...

CentOS Linux 8 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1778142227)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1778142227 advisory. - A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS...

CentOS Linux 8.5 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1776257772)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1776257772 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

Exposure of Resource to Wrong Sphere

Overview Affected versions of this package are vulnerable to Exposure of Resource to Wrong Sphere in the gofer process when CUSE is enabled. An attacker can execute arbitrary code with root privileges on the host system by including a /dev/cuse character device node in a container image and...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: httpd (UTSA-2026-090049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-090049 advisory. HTTP/2 2.4.20 through 2.4.39 very early pushes, for example configured with H2PushResource, could lead to an overwrite of memory in the pushing request's pool, leadi...

Unity Linux 20.1050e / 20.1060e / 20.1070-8ae / 20.1070e Security Update: httpd (UTSA-2023-003825)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-003825 advisory. Out-of-bounds Write vulnerability in modsed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affect...

AZL-104994 CVE-2026-55556 affecting package rsyslog 8.2308.0-7

Rsyslog is a rocket-fast system for log processing. From 8.2110.0 until 8.2604.0, the optional imhttp module's parseauthheader function in contrib/imhttp/imhttp.c allocates a zero-byte heap buffer with calloc0, len when an HTTP Basic Authorization value exceeds its fixed work buffer, then passes...

EUVD-2026-80562

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexecfile: Prevent kexec range truncation Sashiko AI review pointed out the following issue. The mergememoryranges function incorrectly handles overlapping memory ranges when merging them. Although sortmemoryranges sorts...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78961

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56907

A shared memory overwrite vulnerability exists in VPU due to improper input validation . This flaw could allow for a local escalation of privilege , requiring System execution privileges to exploit. Notably, no user interaction is required for exploitation. Details regarding specific affected ver...

PT-2026-92312

Name of the Vulnerable Software and Affected Versions VPU affected versions not specified Description Improper input validation in VPU allows for a shared memory overwrite. This issue can lead to local escalation of privilege, granting the attacker System execution privileges without requiring us...

CVE-2026-56907: Improper Input Validation

In VPU, there is a possible shared memory overwrite due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: aspeed – Fixed memory overwriting issues when the resolution is 1600x900. When displaying at a resolution of 1600x900, the system may crash if the system’s memory usage is tight. How to reproduce this issue: 1. Use a...