CVE-2023-33242

CVE-2023-33242 CVE-2023-33242 PoC The simulated Lindell17 protocol is vulnerable to a bit extraction exploit, allowing an attacker to recover the private key by iteratively extracting individual bits of the key. The protocol is designed to generate ECDSA signatures in a client-server model, with...

CVE-2019-13272

CVE-2019-13272 Linux ローカルルートエクスプロイト Linux 4.10 5.1.17 PTRACETRACEME ローカルルート CVE-2019-13272 root@kitploit: In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users ...

EulerOS Virtualization 2.11.0 : ppp (EulerOS-SA-2026-3540)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...

EulerOS Virtualization 2.11.1 : ppp (EulerOS-SA-2026-3453)

According to the versions of the ppp package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : The passprompt plugin in pppd in ppp before 2.5.2 mishandles privileges.CVE-2024-58250 Tenable has extracted the preceding description...

-Kernel-ptrace-c-mishandles-vulnerability-CVE-2019-13272

-CVE-2019-13272...

CVE-2021-4034-pwnkit

CVE-2021-4034, PwnKit Proof of concept for PwnKit, a local privilege escalation in polkit's pkexec. On a default install any unprivileged local user can become root. About the bug Vulnerable versions of pkexec mishandle the process argument count. That lets controlled environment variables get...

Astra Linux – Vulnerability in TeXeVe-Bin

In axohelp.c, before version 1.3 in axohelp, and in axodraw2 before version 2.1.1b, sprintf is handled incorrectly. This issue is present in distributions like TeXLive and other collections...

Astra Linux – Vulnerability in python-psutil

psutil also known as python-psutil from version 5.6.5 onwards may have a double-free issue. This issue occurs due to improper handling of reference counts within a while loop or for loop, which converts system data into a Python object...

Astra Linux – Vulnerability in Mariadb 10.3

MariaDB before version 10.6.2 allows an application to crash due to improper handling of a pushdown from a HAVING clause to a WHERE clause...

Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

A issue was discovered in l2capsockrelease in net/bluetooth/l2capsock.c in the Linux kernel before version 6.4.10. There is a use-after-free issue, as the children of a sk object are handled incorrectly...

CVE-2026-89161

CVE-2026-89161 affects PCRE2 before version 10.48 . The vulnerable component is the pcre2_jit_match function, which mishandles a previously copied subject when it is passed in as a context, potentially leading to an incorrect free operation . This memory management flaw could result in memory cor...

CVE-2026-89161

In PCRE2 before 10.48, pcre2jitmatch mishandles a previously copied subject being passed in as a context. An incorrect free operation can occur...

CVE-2026-78135

CVE-2026-78135 affects the libcharon component of strongSwan 5.9.7 through 6.0.7 . The root cause is a mishandling of CREATE_CHILD_SA requests on unestablished IKE SAs within the IKEv2 state machine, which can result in the creation of a usable Child SA before authentication completes —effectivel...

Linux Distros Unpatched Vulnerability : CVE-2026-89087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The cstruct package before 6.3.0 for OCaml mishandles indexes. CVE-2026-89087 Note that Nessus relies on the presence of the package as reported by the vendor...

CVE-2026-89094

Forgejo before 16.0.4 allows remote code execution via a crafted template repository because template expansion on files in .forgejo/template is mishandled...

UBUNTU-CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

The cstruct package before 6.3.0 for OCaml mishandles indexes...

CVE-2026-89087

CVE-2026-89087 affects the cstruct package for OCaml in versions before 6.3.0 . The root cause is an index mishandling issue. The assigned CVSS 3.1 score is 7.3 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating a network-reachable flaw requiring no privileges or user interac...

CVE-2026-57825

A flaw was found in the opam package manager for OCaml. This vulnerability allows a malicious package to bypass the sandbox protection mechanism. By mishandling symlinks during the processing of .install files, an attacker can write arbitrary files to unintended locations on the system, potential...