35339 matches found
CVE-2026-84396
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
CVE-2026-76192
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
CVE-2026-84396
Adobe InDesign Desktop is affected by a NULL Pointer Dereference (CWE-476) vulnerability. An attacker could exploit this issue to cause an application denial-of-service by crashing the software. Successful exploitation requires user interaction , specifically for a victim to open a malicious file...
CVE-2026-76192
Adobe InDesign Desktop is affected by a NULL Pointer Dereference (CWE-476) vulnerability. An attacker could exploit this issue by inducing a victim to open a malicious file , which may result in an application crash leading to a denial-of-service condition. No specific information regarding avail...
CVE-2026-76192 InDesign Desktop | NULL Pointer Dereference (CWE-476)
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
EUVD-2026-84750
InDesign Desktop is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue requires user interaction in...
gstreamer1-plugins-base security update
An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...
EUVD-2026-84574
Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the NPPMSAVESESSION handler in PowerEditor/src/NppBigSwitch.cpp converts lParam to a sessionInfo pointer and dereferences its nbFile, files, and sessionFilePathName members without checking for null. A process running at the...
CVE-2019-10207
CVE-2019-10207 CVE-2019-10207 的 PoC：Linux 内核蓝牙 hciuart 驱动空指针解引用 root@kitploit: gcc CVE-2019-10207.c -o cve-2019-10207-poc -static 在 4.20.0 上测试 内核编译需要开启以下 CONFIG 选项： root@kitploit: CONFIGBTHCIUARTMRVL=y CONFIGBTMRVL=y...
ioctlance
IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...
CVE-2009-2692
CVE-2009-2692 Linux 空指针解引用 这只是 https://www.exploit-db.com/exploits/9545/ 上代码的编译二进制文件 为教育目的编译 它在 CentOS 4.8 下编译...
NFSundown
概述 NFSundown（CVE-2025-38089）的概念验证利用代码。它可以远程触发NFS服务器的内核崩溃。 详情 远程攻击者可通过发送特制的RPC请求，触发内核空指针解引用并导致内核崩溃。这是由于在SUNRPC代码路径中未正确处理 rqstp-rqacceptstatp 指针，使其保持为NULL并在错误处理分支中被解引用。在某些情况下（当所有服务器线程至少接受过一次连接时），这还可能导致释放后使用（use-after-free）。该漏洞已被分配编号CVE-2025-38089。 受影响版本...
CVE-2024-26475
CVE-2024-26475 作者 Sherlock Fang, Vlad Tronciu, Ayam Babu 描述 radareorg radare2 v.0.9.7 至 v.5.8.6 版本中存在一个问题，并在 v.5.8.8 中修复，本地攻击者可通过 grubsfsreadextent 函数导致拒绝服务。 攻击向量 精心构造一个载荷，使 “treeblock = grubmallocdata-blocksize;” 在内存中指向 NULL，因此当 “treeblock” 的值被赋给 “tree = struct grubsfsbtree treeblock;”...
CVE-2023-3338-DECPwn
DECPwn 使用我的DECnet漏洞和空页映射启用，练习不同的Linux内核利用技术。 场景 全部禁用 ：qemu-system-x8664 -append "nosmap nosmep nopti nokaslr" 代码执行被重定向到用户态的output函数，该函数调用commitcredspreparekernelcred0。 系统调用挂钩 将 syscalltable 中的 mkdir 系统调用处理程序地址替换为一个类似于场景1的函数。 启用SMEP和KPTI ：qemu-system-x8664 -append "nosmap nokaslr"...
CVE-2026-88339
A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC version 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field using a NULL source pointer . An attacker can provide a specially crafted input file to trigger this con...
CVE-2015-8543_for_SLE12SP1
root@kitploit: $cat /etc/-release PRETTYNAME="SUSE Linux Enterprise Server 12 SP1" root@kitploit: $id uid=1000jeremysp1 gid=100users groups=100users root@kitploit: $sudo sh disablesecurity.sh $gcc exp.c -o exp 2/dev/null $../nsjail/nsjail -Mo --user 0 --group 0 --keepcaps --chroot / -- /bin/sh -i...
CVE-2026-73547
Envoy 's ext_authz filter contains a null pointer dereference: when an authorization response includes query_parameters_to_set or query_parameters_to_remove, the filter calls request_headers_->Path() to parse the query string. A path-less CONNECT request causes that pointer to be null, and Fil...
CVE-2022-34683
CVE-2022-34683 NVIDIA GPU 显示驱动程序（Windows 版本）在内核模式层（nvlddmkm.sys）的 DxgkDdiEscape 处理程序中包含一个漏洞，该漏洞会导致空指针解引用，可能引发拒绝服务。 身份验证| 复杂度| 向量 ---|---|--- 不可用| 不可用| 不可用 机密性| 完整性| 可用性 ---|---|--- 不可用| 不可用| 不可用 CVSS 评分：不可用 参考 https://nvidia.custhelp.com/app/answers/detail/aid/5415 爆破文件 CVE-2022-34683.json 关于此仓库...
CVE-2024-36424
CVE-2024-36424 该漏洞由 Secunnix 漏洞研究团队 的 M. Akil Gündoğan 发现并披露。本仓库将存放概念验证（PoC）及安全公告。 详细信息： 产品： K7 Ultimate Security 受影响版本： v17.0.2019 CVE ID： CVE-2024-36424 操作系统： 所有受支持的 Windows 版本，已在 Windows 10 Pro 上测试 状态： 协调负责任披露。 发布日期： 2024年8月13日 漏洞描述： 在 K7 Ultimate Security v17.0.2019 中，驱动程序文件 K7RKScan.sys - 该版...