libpcap security update

An update is available for libpcap. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libpcap packages provide a portable framework for low-level network...

RLSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

CVE-2026-106453

A flaw was found in lz4-java. The library trusts the decompressed length header in compressed input before validating the input data, leading to uncontrolled memory allocation. A remote attacker can exploit this vulnerability by supplying a specially crafted input that specifies an excessively...

CVE-2026-106452

A flaw was found in lz4-java. A remote attacker can trigger a Denial of Service DoS by providing a crafted compressed data stream with an oversized block header. During decompression, the input stream allocates memory based on this attacker-controlled size field before reading the actual payload,...

CVE-2026-106450

A flaw was found in lz4-java. By supplying a specially crafted stream containing many small frame headers, a remote attacker can trigger disproportionate memory allocations during decompression. This excessive allocation consumes substantial memory and processing resources, potentially leading to...

CVE-2014-0160

CVE-2014-0160 Heartbleed を使用して Web アプリのメモリを漏洩するためのラボ このリポジトリは、Heartbleed 手法を使用して nginx を簡単に悪用できる環境を作成するためのコンテナ構築に焦点を当てています。内容は以下の通りです: Docker を使用した環境構築 サーバーセットアップの図 デモ手順 サーバー図 CVE-2014-0160 の問題は、OpenSSL ライブラリが TLS ハートビート機能を提供する際に、バッファサイズが 64KB であるために余剰が生じ、サーバーメモリの機密情報が漏洩するというものです。 攻撃フロー ペイロード...

Filedumper

FileDumper - 内存取证转储工具 FileDumper v1.0.1 一个简单而强大的工具，能够直接从进程内存区域转储文件。 诞生于人类智慧与AI创造力之间的深夜合作—— xAI的Grok + Kadir Isbirligi 2026 "我们聊了一晚，写了代码，猛捶了桌子…… 人类 + AI = 无限力量！" 这是什么？ FileDumper 是一款基于 Windows 的内存取证工具，能够： 列出活动进程 显示进程信息（CPU/内存使用） 暂停 / 恢复进程 搜索并转储匹配特定字节模式（例如 PDF、JPG、SWF 等文件签名）的内存区域 将转储的内存块保存为 .bin...

K000163576: Multiple Linux kernel vulnerabilities

Security Advisory Description CVE-2026-52911 In the Linux kernel, the following vulnerability has been resolved: ksmbd: scope conn-binding slowpath to bound sessions only When the binding SESSIONSETUP sets conn-binding = true, the flag stays set after the call so that the global session lookup in...

CVE-2025-64720-PoC

CVE-2025-64720: libpng パレット事前乗算におけるバッファオーバーフロー ステータス : パッチ適用済み 深刻度 : 高 CVE ID : CVE-2025-64720 発見日 : 2025-11-XX 公開日 : 2025-11-21 概要 要約 libpng の pngimagereadcomposite 関数に、PNGFLAGOPTIMIZEALPHA が有効なパレット画像を処理する際に、範囲外読み取りの脆弱性が存在します。pnginitreadtransformations 内のパレット合成コードは、事前乗算中に背景合成を誤って適用し、簡易 PNG API...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

CVE-2025-65320

CVE-2025-65320 CVE-2025-65320: Abacre Restaurant Point of Sale POS におけるメモリ内の機密情報の平文保存。 Abacre Restaurant Point of Sale POS のバージョン 15.0.0.1656...

CVE-2026-106061

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...

kernel: netfilter: synproxy: refresh tcphdr after skb_ensure_writable

A flaw was found in the Linux kernel's netfilter synproxy module. When handling TCP timestamp options, a stale pointer can be used after memory reallocation. This can result in memory corruption, where data is written to a freed memory area, or lead to packets being sent with an incorrect checksu...

kernel: RDMA/rxe: Fix OOB in free_rd_atomic_resources()

A flaw was found in the Linux kernel's RDMA/rxe component. A local user could exploit a memory corruption vulnerability in the freerdatomicresources function by updating the maxdestrdatomic value before the old array is properly freed, leading to an out-of-bounds write. This issue can cause a...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

kernel: ALSA: 6fire: fix use-after-free on disconnect

A flaw was found in the Linux kernel's ALSA 6fire USB audio device driver. During the disconnection process of a 6fire USB audio device, a use-after-free vulnerability occurs. This happens when the system attempts to write to memory that has already been deallocated, which can lead to memory...

CVE-2026-106061 Gimp: gimp: heap buffer over-read in x cursor (xmc) thumbnail loader on crafted file

A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...