CVE-2026-80917

This Linux kernel vulnerability affects the PCI host-generic driver on 32-bit CAM (legacy) systems using the pci-host-cam-generic device-tree binding. The root cause is that the CAM ops in pci-host-generic.c lack the ->add_bus/->remove_bus callbacks present in the generic ECAM ops. On 32-bi...

EUVD-2026-75092

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2026-80917 PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems

In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer dereference on 32-bit CAM systems On 32-bit systems the config space is too large to ioremap in one go, so pciecamcreate maps each bus segment separately and relies on the -addbus callback...

CVE-2025-24990_POC

Windows Agere Modem 드라이버ltmdm64.sys. 이 드라이버는 매우 오래되었으며 테스트 머신에서 기본적으로 로드되지 않으므로 BYOVD 시나리오에서 악용하겠습니다. 흥미롭게도 제 조사에 따르면 이 드라이버는 Windows 7부터 존재했으며 최소한 하나의 버그가 있습니다. 여기 당시 MSRC는 아무 조치도 취하지 않았습니다 🤡 취약점 이 드라이버 내 일부 IOCTL은 METHODNEITHER를 사용하지만 호출자가 제공한 주소 버퍼가 사용자 모드인지 커널 모드인지 확인하지 않습니다. OSR로 디코딩한 IOCTL ...

389-ds-base security, bug fix, and enhancement update

An update is available for 389-ds-base. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3 compliant server. The ba...

practice-22-23

프로젝트 실행: ./script.sh GitHub 저장소 - https://github.com/LaCinquette/practice-22-23 진행 상황 1. 취약점을 찾기 위해 FFmpeg 프로젝트를 선택했습니다. 요구 사항을 충족하는 커밋을 찾았습니다: CWE-476 유형 - 널 포인터 역참조 2. 도커파일을 생성했습니다: 1. 기본 이미지로 Ubuntu 22.04 선택 2. 패키지 설치 및 기타 명령 중 명령줄 상호작용을 방지하기 위해 DEBIANFRONTEND=nointeractive 설정 3. 공식 위키에 명시된 필수...

CVE-2026-12166_CVE-2026-12167_CVE-2026-12168

Множественные локальные уязвимости повышения привилегий в драйвере Little Orbit GFAC GFACSysx64.sys | ---|--- Идентификаторы CVE| CVE-2026-12166, CVE-2026-12167, CVE-2026-12168 Производитель| Little Orbit Продукт| Драйвер GamersFirst Anti-Cheat GFAC GFACSysx64.sys Затронутые версии| Информация о...

CVE-2026-86547

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

CVE-2022-34556

CVE-2022-34556 설명 PicoC v3.2.2에서 variable.c에 NULL 포인터 역참조null pointer dereference가 발견되었습니다. Picoc를 사용하는 모든 프로젝트나 라이브러리도 이 문제의 영향을 받습니다. 예를 들어 picoc-js가 있습니다. 환경 설정 PicoC에서 NULL 포인터 역참조 취약점을 재현하려면 먼저 취약한 버전v3.2.2의 PicoC 라이브러리와 인터프리터를 다운로드하고 컴파일해야 합니다: root@kitploit: git clone...

EUVD-2026-74787

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

CVE-2026-86547

mruby-c (mrubyc) through 4.0.0 contains a null pointer dereference in the op_enter() handler in src/vm.c when processing untrusted bytecode. An attacker can craft malicious .mrb bytecode files with OP_ENTER instructions at the top level to crash the embedding application, resulting in denial of s...

CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

CVE-2026-86547 mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

mrubyc through 4.0.0 contains a null pointer dereference vulnerability in the openter handler in src/vm.c when processing untrusted bytecode. Attackers can craft malicious .mrb bytecode files with OPENTER instructions at the top level to crash the embedding application and cause denial of service...

Analisi-CVE-2017-5715

이 저장소에는 README가 없습니다...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

CVE-2026-45729

CVE-2026-45729 — 잘못된 SVG를 통한 ThorVG NULL 포인터 역참조 심각도: CVSS 4.3 중간 — CWE-476 권고: GHSA-f863-8ghq-7h64 수정 버전: ThorVG v1.0.5 상태: 패치됨 / 공개됨 요약 ThorVG의 SVG 파서는 루트 노드 내부에서 잘린 하위 요소 태그를 만나면 초기화되지 않은 포인터를 역참조합니다. 이 버그는 일반 렌더링 경로tvg::Picture::load → parse → render를 통해 도달할 수 있으며 6바이트 입력으로 트리거할 수 있습니다. 표준...

Linux Distros Unpatched Vulnerability : CVE-2026-82055

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue exists in MongoDB's 2dsphere index key generation that can cause a server crash due to a null pointer dereference. When a specially crafted...

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: freerdp (UTSA-2026-106775)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-106775 advisory. FreeRDP before 3.29.0 contains a null pointer dereference vulnerability in smartcard cache request decoders that accept NULL NDR pointers for LookupName in...

RockyLinux 9 : 389-ds-base (RLSA-2026:64784)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:64784 advisory. 389-ds-base: 389-ds-base: heap buffer overflow via SASL wrapped-record length lower-bound underflow in sasliostartpacket CVE-2026-18355 389-ds-base:...

openSUSE 16 Security Update : libusb-1_0 (openSUSE-SU-2026:21783-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21783-1 advisory. - CVE-2026-23679: NULL pointer dereference in parseinterface allows attackers to crash applications by supplying a malformed USB configuration...