83809 matches found
EUVD-2026-76279
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80956
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80956 dm-pcache: only hand out initialized cache segments
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80956 dm-pcache: only hand out initialized cache segments
In the Linux kernel, the following vulnerability has been resolved: dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsinit only initializes the first cacheinfo-nsegs segments. A crafted imag...
CVE-2026-80952 i3c: master: Fix info leak and UAF in device unregister path
In the Linux kernel, the following vulnerability has been resolved: i3c: master: Fix info leak and UAF in device unregister path i3cmasterunregisteri3cdevs clears i3cdev-dev-desc before calling deviceunregister. During deviceunregister, devicedel emits a KOBJREMOVE uevent and unbinds the driver...
tpwn
tpwn cve-2015-???? PoC os x 10.10.5 カーネルローカル特権昇格 この脆弱性は 10.11 で潰された 完全な writeup は etason hax してくれた unthreadedjb に shout out tpwn やその他の NULL Pointer Deference バグから身を守るには NULLGuard をインストール...
CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC
CVE-2025-47812 — Wing FTP Server Wing FTP Server = 7.4.3 における未認証のリモートコード実行の脆弱性。ログイン時に username パラメータへ注入された NULL バイトにより、Lua コードがセッションファイルに書き込まれます。その結果のセッションクッキーを使用して /dir.html にアクセスすると、注入されたコードが実行されます — Linux では root として、Windows では SYSTEM として実行されます。 動作の仕組み 1. /loginok.html への細工された POST...
PoC-CVE-2025-69421
CVE-2025-69421 クラッシュ専用再現器 このリポジトリには、隔離された実験環境で CVE-2025-69421 を再現する 最小限の不正な PKCS12 ファイルが含まれています。 生成された PFX には、オプションの encryptedContent フィールドが省略された EncryptedContentInfo を持つ EncryptedData が含まれています。脆弱な OpenSSL バージョンでは、PKCS12unpackp7encdata から PKCS12itemdecryptd2iex に NULL の ASN1OCTETSTRING ポインタが渡され、...
gstreamer1-plugins-base security update
An update is available for gstreamer1-plugins-base. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GStreamer is a streaming media framework based on graphs of...
RLSA-2026:66460 Moderate: gstreamer1-plugins-base security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-base packages contain a collection of well-maintained base plug-ins. Security Fixes: gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in...
CVE-2026-45747
A flaw was found in Suricata, a network Intrusion Detection System. A remote attacker could exploit a NULL dereference vulnerability in the Lua TLS certificate information helper. This vulnerability occurs when a Lua script attempts to retrieve certificate details from TLS Transport Layer Securit...
CVE-2026-89177
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...
EUVD-2026-76004
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...
CVE-2026-89177
WeenyGenius is a computer lab management system by Howyar Technologies . The vulnerability stems from reliance on ZMTP Null mode , an unauthenticated zero-message-transport-protocol handshake that provides no encryption or integrity. An unauthenticated attacker on the same (adjacent) network can ...
CVE-2026-89177 Howyar｜WeenyGenius - Use of Insecure Protocol
WeenyGenius, a computer lab management system by Howyar Technologies, has a Use of Insecure Protocol vulnerability. Due to the reliance on ZMTP Null mode, unauthenticated attackers on the same network can capture packets to leak transmitted data, or perform replay attacks with forged commands to...
Moderate: Red Hat Security Advisory: gstreamer1-plugins-base security update
An update for gstreamer1-plugins-base is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
gstreamer1-plugins-base: gstreamer: NULL/invalid-pointer dereference in gst_rtsp_message_parse_auth_credentials() when parsing a crafted Digest Authorization/WWW-Authenticate header
A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization or WWW-Authenticate header that uses Digest authentication. Specially crafted whitespace placement around a parameter's terminator can cause an internal length...
DEBIAN-CVE-2026-78130
strongSwan 4.2.0 through 6.0.7 has a NULL pointer dereference in the x509 plugin's attribute certificate parser...