CVE-2025-32433

CVE-2025-32433 Erlang/OTP SSH 服务器中存在一个严重漏洞，允许未经认证的远程代码执行 RCE。该缺陷存在于 SSH 协议消息处理机制中，使攻击者无需认证凭据即可执行任意命令。 影响 严重程度的漏洞，攻击者可能能够：- 绕过浏览器的沙箱保护 - 执行任意代码 - 破坏系统完整性 - 未经授权访问系统资源 此漏洞专门针对 Windows 上的 Firefox，并且已在野外被积极利用。如果 SSH 守护进程以 root 身份运行，攻击者将获得对该设备的完全访问权限 漏洞利用: 在此下载 详细信息 CVE ID : CVE-2025-32433 发布日期 :...

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC この脆弱性により、Erlang/OTP SSH サーバーにネットワーク経由でアクセスできる攻撃者は、事前の認証なしに任意のコードを実行できます。 説明 Erlang/OTP SSH サーバーに、認証なしのリモートコード実行（RCE）を攻撃者に許す可能性がある深刻な脆弱性が確認されました。SSH...

CVE-2025-32433.py

CVE-2025-32433.py このPython PoCは、鍵交換、チャネルオープン、コマンドリクエストを含むSSHメッセージフローをシミュレートし、サーバーの動作を分析します。管理されたラボテストを目的としており、プロトコル処理、事前認証メッセージ処理、ペイロードの相互作用を実証することで、研究および防御的分析に役立ちます。...

CVE-2025-32433

Erlang/OTP SSH のリモートコード実行の脆弱性。問題の根源は、SSHプロトコルのメッセージ処理メカニズムに欠陥があり、攻撃者が認証完了前に接続プロトコルメッセージを送信できることにある。注目すべき点は、この脆弱性がSSHサーバーコンポーネントを実行するすべてのErlang/OTPバージョンに影響を与え、基盤となるシステムのバージョンとは無関係であることだ。 LINUXでのコンパイル：gcc CVE-2025-32433.c -o sshexp...

CVE-2026-53921-PoC-Exploit

CVE-2026-53921 – odhcpd スタックオーバーフロー ⚠️ 教育および許可されたテスト目的のみ。無許可での使用は違法です。 📖 脆弱性概要 CVE-2026-53921 は、OpenWrt の odhcpd デーモン（既定の DHCPv6/DHCPv4/RA サーバー）における深刻なスタックバッファオーバーフロー です。 🔍 動作の仕組み この脆弱性は odhcpd の DHCPv6 メッセージ処理コード、具体的には buildia 関数と dhcpv6iahandleIAs 関数に存在します。 技術的詳細 1. 根本原因 このバグは、DHCPv6 Reply...

USN-8682-1: Bind vulnerabilities

Vitaly Simonovich discovered that Bind could exhaust memory during GSS-API TKEY negotiation. A remote attacker could possibly use this issue to cause Bind to use excessive resources, leading to a denial of service. CVE-2026-3039 Shuhan Zhang discovered that Bind incorrectly handled self-pointed...

CVE-2026-59682

Arbitrary file overwrite via SAVEPROFILE message in OpenRGB. This issue affects OpenRGB through 1.0rc3...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND [CVE-2026-5946]

Summary IBM Watson Speech Services Cartridge is vulnerable to a DOS in ISC BIND, due to multiple flaws causing an Improper Input Validation CVE-2026-5946. ISC BIND is used as part of our speech utilities. This vulnerability has been addressed. Please read the details for remediation below...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: drm/xe/pf: Do not attempt to process FASTREQ or EVENT messages. Currently, VF/PF relay actions only use regular REQUEST messages. The PF should not attempt to handle FASTREQUEST or EVENT messages, as doing so would break the VFPF...

Assignment to Variable without Use

Overview Affected versions of this package are vulnerable to Assignment to Variable without Use due to improper handling of content type caching. An attacker can cause incorrect processing of message content by manipulating the content type during message handling. Remediation Upgrade...

CVE-2026-44254 Wazuh: Stack Out-of-Bounds Write in remoted Decompression Path

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 1.0.0 until 4.14.6 and 5.0.0-beta2, HandleSecureMessage in src/remoted/secure.c passes a pointer inside its stack buffer to ReadSecMSG, and src/oscrypto/shared/msgs.c decompresses up to OSMAXSTR byt...

Linux Distros Unpatched Vulnerability : CVE-2026-72360

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/xe/pf: Don't attempt to process FASTREQ or EVENT relays Currently defined VF/PF relay actions use regular REQUEST messages only and the PF shouldn't attempt...

CVE-2026-73555 vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the validationexceptionhandler in vllm/entrypoints/openai/serverutils.py converts FastAPI RequestValidationError objects with strexc, and sanitizemessage in vllm/entrypoints/utils.py does not remove traceback-styl...

CVE-2026-43831 tbc

Full details and mitigation steps are currently restricted and will be published at a later date...

UBUNTU-CVE-2026-6390

A flaw was found in GNU nano's multi-buffer error message handling. When a user opens multiple files at startup and one triggers an ALERT-level error, a specially crafted filename containing printf format specifiers can be reinterpreted. This format string vulnerability may allow an attacker to...

CVE-2026-49279 WWBN AVideo: Stored XSS via autoEvalCodeOnHTML Bypass in MessageSQLite WebSocket Handler (CVE-2026-43874 Bypass)

WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML parameter in the MessageSQLite WebSocket Handler. The MessageSQLite.php handler only strips autoEvalCodeOnHTML from $json'msg', but msgToResourceId reads from...

PT-2026-56064

Name of the Vulnerable Software and Affected Versions Langroid versions prior to 0.65.3 Description An application using this framework that exposes a chat interface to untrusted users may allow direct tool invocation via raw JSON payloads. This occurs even when tools are registered with use=Fals...

SUSE-SU-2026:2719-1 Security update for pacemaker

This update for pacemaker fixes the following issues: - CVE-2026-10649: Fixed denial-of-service via integer overflow in remote message decompression bsc1268381. Changes for pacemaker: - Update to version 2.1.10+20260618.4bca25e3c1: - libcrmcommon: Add additional checks to pcmkremotemessagexml...

Wazuh 4.14.2 Security Scanner

This Python script is a non-exploitative security scanner designed to test basic responsiveness and message handling behavior of a Wazuh cluster communication endpoint...

CVE-2026-33449

CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivably leading to a denial of service...