CVE-2026-77838

creationtimestamp| type| source ---|---|--- 2026-08-28 04:45:10+00:00| seen| https://jvn.jp/en/jp/JVN04485476...

Windows-Non-Paged-Pool-Overflow-Exploitation

Índice Índice Introdução Introdução a Named Pipes Exploração Espalhamento do pool não paginado Divulgação de memória/Leitura arbitrária Controle completo sobre os dados de transbordo Controle limitado sobre os dados de transbordo Escrita arbitrária Liberação arbitrária de objetos...

pipe-intercept

pipe-intercept Intercettare la comunicazione delle Named Pipe di Windows utilizzando Burp o strumenti proxy HTTP simili Le named pipe sono molto diffuse per la comunicazione tra processi su Windows. Vengono utilizzate in molte applicazioni, inclusa la chiamata di procedura remota RPC di Windows. ...

CVE-2026-53578

creationtimestamp| type| source ---|---|--- 2026-08-27 22:09:09+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mu3uevydce2e 2026-08-28 07:40:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mu4ubtmnvu2c...

CVE-2026-81525

creationtimestamp| type| source ---|---|--- 2026-08-27 22:00:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/fdi7tx66oeqsz 2026-08-27 23:00:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mu3xbkhsju2z 2026-08-28 12:45:52+00:00| seen|...

CVE-2025-7461

creationtimestamp| type| source ---|---|--- 2026-08-27 16:00:04+00:00| seen| Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs 2026-08-28 00:00:36+00:00| published-proof-of-concept| Telegram/7flft83Vjf6wLqlUx37f8i8JmZrWmYSQ64bCcsTKPPshTgs 2026-08-29 23:00:05+00:00| seen|...

CVE-2017-7092

creationtimestamp| type| source ---|---|--- 2026-08-27 12:00:10+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-28 00:00:54+00:00| seen| Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj4aeIoADYB6Hgg 2026-08-29 00:00:16+00:00| published-proof-of-concept|...

bind: BIND: Denial of Service via specially crafted DNS messages

A flaw was found in the bind component, specifically within the named daemon. This vulnerability allows a remote attacker to send specially crafted Domain Name System DNS messages. These messages, which use unusual classes or meta-classes, can trigger assertion failures in the named daemon when...

CVE-2026-79774

creationtimestamp| type| source ---|---|--- 2026-08-25 17:00:43+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtwc7jkmnh26 2026-08-25 18:08:50+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mtwfzdv26c2y 2026-08-27 06:30:04+00:00| seen|...

CVE-2026-78679

creationtimestamp| type| source ---|---|--- 2026-08-25 02:14:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/iblly34rmrd7h...

CVE-2026-78370

creationtimestamp| type| source ---|---|--- 2026-08-24 16:00:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttoe6afsh24 2026-08-24 16:08:16+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttosta3722p...

CVE-2026-66587

creationtimestamp| type| source ---|---|--- 2026-08-24 12:06:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ye6egmacr3iu 2026-08-24 12:50:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttdqhzsjc25 2026-08-24 14:07:40+00:00| seen|...

Astra Linux – Vulnerability in curl

This flaw allows an attacker to insert cookies into a running program using libcurl, provided that certain conditions are met. Libcurl performs transfers. In its API, an application creates “easy handles”—individual handles used for single transfers. Libcurl provides a function called...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: ntfs: Centralized validation of the $INDEXROOT header. A dedicated helper function has been added to perform more stringent validation of the $INDEXROOT, and this function is used for both directory inodes and named index...

Astra Linux – Vulnerability in bind9

In BIND 9.0.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.9.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of the Supported Preview Edition, as well as release versions 9.17.0 - 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record that...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: tipc: Fixed a use-after-free issue in tipcnamedreinit. syzbot identified the following issue: BUG: KASAN: Use-after-free in tipcnamedreinit+0x94f/0x9b0 net/tipc/namedistr.c:413 A 8-byte read at address ffff88805299a000 was...

Astra Linux – Vulnerability in bind9

In BIND 9.5.0 - 9.11.29, 9.12.0 - 9.16.13, and versions BIND 9.11.3-S1 - 9.11.29-S1 and 9.16.8-S1 - 9.16.13-S1 of the Supported Preview Edition, as well as release versions 9.17.0 - 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and...

Astra Linux – Vulnerability in bind9

By spoofing the target resolver with responses that have a malformed ECDSA signature, an attacker can trigger a small memory leak. It is possible to gradually erode the available memory to the point where named crashes occur due to lack of resources...

CVE-2026-77003

creationtimestamp| type| source ---|---|--- 2026-08-23 21:39:40+00:00| seen| https://bsky.app/profile/cvemon.bsky.social/post/3mtrqujhhvs2k...

CVE-2026-75922

creationtimestamp| type| source ---|---|--- 2026-08-23 18:54:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/a2qowb4i2bolr 2026-08-23 20:06:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/gqak3r26wcsli 2026-08-24 07:32:16+00:00| seen|...