CVE-2026-76781

A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog parsing. This occurs when a nextCatalog element lacks its mandatory catalog attribute, leading to the application crashing and causing a...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

tomcat-coyote: Apache Tomcat: Authentication bypass via digest authentication

A flaw was found in Apache Tomcat. When DIGEST authentication was configured, any user not known to the configured Realm would be authenticated if they presented the password "null". This allows a remote attacker to bypass security controls...

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

EUVD-2026-81460

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

CVE-2026-92413

A flaw was found in Artifex MuPDF. A remote attacker can exploit this vulnerability by executing a manipulation related to PDF Xref Loading, specifically within the pdfopenfilter function. This can lead to a null pointer dereference, which may result in a denial of service DoS condition, making t...

CVE-2009-2265

CVE-2009-2265 - Adobe ColdFusion 8 RCE par téléchargement de fichier Une implémentation en Rust du POC pour l'exploit CVE-2009-2265, ciblant Adobe ColdFusion 8. Présentation de la vulnérabilité Cette vulnérabilité permet à un attaquant non authentifié de télécharger des fichiers arbitraires dans ...

CVE-2026-34159-Vulnerability-Research-Analysis-Detection

CVE-2026-34159-Vulnerability-Research-Analysis-Detection Contournement critique de validation de tampon dans deserializetensor llama.cpp b8492. Un tampon tensoriel nul contourne la vérification des limites, permettant une lecture/écriture arbitraire non authentifiée via GRAPHCOMPUTE. Contournemen...

testanull-CVE-2021-22005.py

Ce depot n’a pas de fichier README...

CVE-2025-4476-Exploit

CVE-2025-4476-Exploit Un petit client de test en Python pour envoyer des requêtes HTTP GET avec un en-tête Authorization: Basic surdimensionné. Cet outil est destiné aux tests en laboratoire et à la recherche sur les problèmes d'analyse d'en-têtes par exemple, les bugs de déréférencement nul /...

CVE-2026-23398

CVE-2026-23398 Déréférencement de pointeur NULL icmptagvalidation dans le noyau Linux DoS à distance Description icmptagvalidation dans net/ipv4/icmp.c déréférence inetprotosproto sans vérification NULL. Un attaquant distant peut envoyer un seul paquet ICMP Fragmentation Needed forgé avec un numé...

cve-2026-43512-poc

CVE-2026-43512 — Contournement de l'authentification DIGEST d'Apache Tomcat Résultat de l'analyse d'exploitabilité : la cause racine est confirmée. L'exploitation de bout en bout n'est pas reproductible sur un déploiement standard UserDatabaseRealm. Voir Analyse pour les détails. Table des matièr...

CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

UBUNTU-CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

Linux Distros Unpatched Vulnerability : CVE-2026-76781

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in libxml2. A local user or an attacker providing a specially crafted XML catalog can trigger a NULL pointer dereference during XML catalog...

UBUNTU-CVE-2026-89780

In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: restore skb-dev on deaggregated frames rmnetmapdeaggregate allocates each sub-frame with allocskb and leaves skb-dev NULL. rmnetmapingresshandler assigns skb-dev = ep-egressdev only on the data path, but a M...

Linux Distros Unpatched Vulnerability : CVE-2026-92413

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Artifex MuPDF up to b6d17493700c621c0e70036980a6ebd06d2202c9. Affected by this vulnerability is the function pdfopenfilter of the file...

CVE-2026-89784

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: check rpcsockaddr2uaddr return value in rpcbregisterinet4/6 rpcbregisterinet4 and rpcbregisterinet6 store the result of rpcsockaddr2uaddr into map-raddr without checking it for NULL. rpcsockaddr2uaddr returns NULL when it...

CVE-2026-89912

A flaw was found in the Linux kernel's KVM Kernel-based Virtual Machine for ARM64 architecture, specifically within the vgic-its component. A malicious guest virtual machine could trigger a null pointer dereference on the host system during a migration save operation. This could lead to a denial ...