CVE-2026-44034

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

CVE-2026-16176

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation...

CVE-2025-7771

CVE-2025-7771 — ThrottleStop.sys による任意の物理メモリ読み書き TechPowerUp の ThrottleStop.sys ドライバーCVE-2025-7771の完全な概念実証。 署名済みで現在もロード可能なカーネルドライバーが、検証されていない物理メモリの読み取りと 書き込みを 2 つの IOCTL を通じて公開している。このリポジトリは、そのプリミティブを 動作する管理者から SYSTEM へのローカル特権昇格に変え、ほとんどのパスおよびファイル名 ベースの検出を無効化するデバイス命名の癖を文書化する。 同じ IOCTL に対する PoC...

CVE-2025-54939

LSQUIC의 QUIC-LEAK CVE-2025-54939 PoC 개요 이 PoC는 LSQUIC QUIC 구현에서 핸드셰이크 전 메모리 고갈서비스 거부 취약점인 CVE-2025-54939를 강조합니다. QUIC-LEAK이라 명명된 이 문제는 Imperva에 의해 처음 문서화되었습니다: https://www.imperva.com/blog/quic-leak-cve-2025-54939-new-high-risk-pre-handshake-remote-denial-of-service-in-lsquic-quic-implementation/...

cve_2023_38831_scanner

CVE-2023-38831 스캐너 개요 CVE-2023-38831 스캐너는 WinRAR 설치에서 CVE-2023-38831 취약점의 존재를 탐지하고 분석하도록 설계된 고급 사이버 보안 도구입니다. 이 프로젝트는 파일 무결성 검사, 프로세스 메모리 스캔, 네트워크 트래픽 분석 및 샌드박스 실행을 통합한 다계층 취약점 탐지 방식을 구현합니다. 기능 취약점 탐지 : WinRAR 설치에서 CVE-2023-38831 취약점을 스캔합니다. 파일 무결성 검사 : WinRAR 실행 파일의 무결성을 검증합니다. 프로세스 메모리 스캔 : 실행 ...

CVE-2026-16176

IBM DataPower Gateway versions 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 are vulnerable to a denial of service (DoS) attack. The root cause is improper validation of the length field during memory reallocation (CWE-770). A remote ...

CVE-2026-16176 IBM DataPower Gateway Denial of Service

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation...

EUVD-2026-94891

IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cause a denial of service due to improper validation of the length field during memory reallocation...

research-cve-2025-68971

CVE 2025-68971 | Holloway Chew, Kean Ho's Knowledge Research On 2025-12-22, a security vulnerability CVE 2025-68971 CVSS: 5.5/MEDIUM was discovered in open-source Forgejo 13.0.3 application first detected on FreeBSD14 operating system. It caused the operating system went into mass-killing all...

cve-2022-22947-godzilla-memshell

CVE-2022-22947 godzilla-memshell CVE-2022-22947 고질라 메모리셸 주입...

MongoDeepDive

🌊 MongoDeepDive 컨텍스트 인식 MongoDB 와이어 프로토콜 익스플로잇 CVE-2025-14847 레드팀 운영을 위한 고급 휴리스틱 분석기 💀 개요 MongoDeepDive 는 CVE-2025-14847 의 영향을 받는 MongoDB 서버에서 초기화되지 않은 메모리 누수 를 탐지하도록 설계된 고성능 비동기 취약점 스캐너 및 포렌식 분석기입니다. 단순히 응답 크기만 확인하는 표준 PoC 스크립트와 달리, MongoDeepDive는 섀넌 엔트로피 분석과 휴리스틱 필터링을 사용하여 빈 메모리 패딩가비지과 고가치 비밀예:...

USN-8906-1: Linux kernel (IBM) vulnerabilities

It was discovered that some Arm processors could complete a broadcast translation lookaside buffer TLB invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been...

USN-8905-1 linux-gcp-6.8, linux-gcp-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

USN-8904-1 linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8, linux-azure-fips vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - x86 architecture; - Intel NPU Driver; - Auxiliary...

CVE-2026-44034 Heap out-of-bounds read in DCMTK RLE decodeFrame()

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

EUVD-2026-94937

A heap-based out-of-bounds read in DcmRLECodecDecoder::decodeFrame in dcmdata/libsrc/dcrleccd.cc of OFFIS DCMTK 3.7.0 allows an attacker to read up to 63 bytes of adjacent heap memory, or cause a crash, via a crafted RLE Lossless DICOM file whose pixel data fragment is shorter than the 64-byte RL...

CVE-2025-65264

CVE-2025-65264 Description In CPU‑Z 2.17 and earlier and other products that use CPU-Z driver with version 1.0.6.1 and earlier, the driver e.g. cpuz161.sys dereferenced a value from a user‑supplied address and wrote it to the system buffer supplied by the caller. An attacker could read arbitrary...

CVE-2023-23397

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook CVE-2023-23397 is a remote code execution vulnerability in Microsoft Outlook, a popular email client used by millions of users worldwide. This vulnerability was discovered by security researcher Leandro Costa and reported to...

USN-8888-2 linux-azure-7.0, linux-azure-fde-7.0 vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...

USN-8888-2: Linux kernel (Azure) vulnerabilities

It was discovered that some AMD processors did not properly perform Reverse Map Table RMP checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory...