Lucene search
+L

84086 matches found

RedHat Linux
RedHat Linux
added 2026/09/17 3:08 p.m.6 views

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

9.8CVSS0.01326EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2026/09/17 3:07 p.m.6 views

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

9.8CVSS0.01326EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2026/09/17 2:41 p.m.7 views

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

7.1CVSS0.00335EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/17 12:18 p.m.8 views

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

7.1CVSS0.00335EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/17 11:48 a.m.9 views

EUVD-2026-81460

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

7.1CVSS0.00335EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/09/17 7:19 a.m.8 views

CVE-2026-92413

A flaw was found in Artifex MuPDF. A remote attacker can exploit this vulnerability by executing a manipulation related to PDF Xref Loading, specifically within the pdfopenfilter function. This can lead to a null pointer dereference, which may result in a denial of service DoS condition, making t...

5.3CVSS0.00434EPSS
SaveExploits0References2
Kitploit
Kitploit
added 2026/09/17 4:51 a.m.9 views

CVE-2009-2265

CVE-2009-2265 - RCE через загрузку файлов в Adobe ColdFusion 8 Реализация POC для эксплойта CVE-2009-2265 на Rust, нацеленная на Adobe ColdFusion 8. Обзор уязвимости Эта уязвимость позволяет неаутентифицированному злоумышленнику загружать произвольные файлы в каталог, доступный через веб, на...

7.5CVSS7AI score0.83744EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/17 1:53 a.m.13 views

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Критический обход проверки буфера в deserializetensor llama.cpp b8492. Нулевой тензорный буфер пропускает проверку границ, что позволяет выполнить неаутентифицированное произвольное чтение/запись через GRAPHCOMPUTE. Обход ASLR и RCE через T...

9.8CVSS7.7AI score0.01126EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 1:48 a.m.8 views

testanull-CVE-2021-22005.py

В этом репозитории нет README...

9.8CVSS8.2AI score0.99999EPSS
SaveExploits11
Kitploit
Kitploit
added 2026/09/17 1:47 a.m.10 views

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Небольшой тестовый клиент на Python для отправки HTTP GET-запросов с заголовком Authorization: Basic увеличенного размера. Этот инструмент предназначен для лабораторного тестирования и исследований проблем разбора заголовков например, ошибок разыменования нулевого указателя ...

4.3CVSS6.5AI score0.00385EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/17 12:51 a.m.15 views

CVE-2026-23398

CVE-2026-23398 Разыменование нулевого указателя в icmptagvalidation ядра Linux удалённый DoS Описание Функция icmptagvalidation в net/ipv4/icmp.c разыменовывает inetprotosproto без проверки на NULL. Удалённый злоумышленник может отправить один специально сформированный ICMP-пакет Fragmentation...

5.5CVSS6.8AI score0.00124EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/09/17 12:46 a.m.14 views

cve-2026-43512-poc

CVE-2026-43512 — Обход аутентификации DIGEST в Apache Tomcat Результат анализа эксплуатируемости: первопричина подтверждена. Скользящая эксплуатация не воспроизводится на стандартном развертывании UserDatabaseRealm. Подробности см. в Анализе. Оглавление Обзор Затронутые версии Корневая причина...

9.8CVSS7.5AI score0.01326EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2026/09/17 12:00 a.m.7 views

CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

0.0021EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2026/09/17 12:00 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-76781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog...

5.5CVSS0.0016EPSS
SaveExploits0References3
OSV
OSV
added 2026/09/17 12:00 a.m.5 views

UBUNTU-CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

0.0021EPSS
SaveExploits0References11
OSV
OSV
added 2026/09/17 12:00 a.m.5 views

UBUNTU-CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

0.0021EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2026/09/17 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-92413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file...

5.3CVSS0.00434EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2026/09/17 12:00 a.m.10 views

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

0.0021EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
added 2026/09/16 8:33 p.m.11 views

CVE-2026-89912

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the vgic-its component. A malicious guest virtual machine could trigger a null pointer dereference on the host system during a migration save operation. This could lead to a denial ...

7.1CVSS0.00174EPSS
SaveExploits0References4
Kitploit
Kitploit
added 2026/09/16 6:18 p.m.12 views

CVE-2026-31431

CVE-2026-31431 — NULL 포인터에서 루트 권한까지: Linux 커널의 AFALG AEAD 익스플로잇 버그 클래스: NULL 포인터 역참조 → 힙 OOB 쓰기 → 자격 증명cred 덮어쓰기 영향받는 서브시스템: net/alg/afalg.c 영향: 로컬 권한 상승비특권 사용자 → root 영향받는 커널: Linux 4.4 – 4.9패치 전 요약 커널이 사용자 공간 주소를 기대하는 위치에 NULL 포인터를 전달하면서 setsockopt를 호출합니다. 커널은 주소 0x00000000에서 읽어옵니다. 그리고 제로 페이지를...

7.8CVSS6.2AI score0.99907EPSS
SaveExploits243
Rows per page
Query Builder