EUVD-2026-67936

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP state variable query requests. A specially crafted SOAP query may trigger unexpected termination or instability of the process hosting the UPnP service. Successful exploitation may result in ...

EUVD-2026-67935

A NULL pointer dereference vulnerability exists in TL-WR841N v14 in the UPnP service when processing SOAP action requests. A specially crafted SOAP action request containing unexpected XML content may cause the UPnP daemon to terminate unexpectedly. Successful exploitation may result in a...

CVE-2026-75125

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-76650

CVE-2026-76650 is a NULL pointer dereference in the UPnP service of TP-Link TL-WR841N v14 , triggered by a specially crafted SOAP state variable query request . Successful exploitation causes the UPnP process to terminate or become unstable, resulting in a denial-of-service affecting UPnP discove...

CVE-2026-76649

TP-Link TL-WR841N v14 is affected by a pre-authentication NULL pointer dereference in its UPnP service when processing SOAP action requests. A specially crafted SOAP request containing unexpected XML content causes the UPnP daemon to terminate, resulting in a denial-of-service condition that pers...

tpwn

tpwn cve-2015-???? poc os x 10.10.5 escalation dei privilegi locali del kernel la vulnerabilità è stata bruciata in 10.11 writeup completo etason shout out a @ unthreadedjb per gli hax Installa NULLGuard per proteggerti da tpwn e altri bug di NULL Pointer Deference...

CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-

Advisory di sicurezza: Dereferenziazione di puntatore NULL non autenticata che causa il crash del server TinyWeb ID CVE assegnato: CVE-2026-67184 Riepilogo Quando TinyWeb non riesce a analizzare una riga di richiesta, restituisce un errore ma lascia il puntatore all'URL della richiesta impostato ...

CVE-2026-45729

CVE-2026-45729 — Dereferenziazione di Puntatore NULL in ThorVG tramite SVG Malformato Gravità: CVSS 4.3 Media — CWE-476 Avviso: GHSA-f863-8ghq-7h64 Corretto: ThorVG v1.0.5 Stato: Corretto / Divulgato Riepilogo Il parser SVG di ThorVG dereferenzia un puntatore mai inizializzato quando incontra un...

CVE-2026-77217

PLANET GS-4210-16P2S firmware prior to 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post handlers copy the radKey , radKey_0 , radDftParamKey , radName , and radIp POST parameters into fixed-s...

EUVD-2026-67787

PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The webradiusSrvpost family of handlers copies the radKey, radKey0, radDftParamKey, radName, and radIp POST parameters into...

PoC-CVE-2025-69421

Riproduttore solo crash CVE-2025-69421 Questo repository contiene un file PKCS12 malformato minimale che riproduce la CVE-2025-69421 in un ambiente di laboratorio isolato. Il PFX generato contiene un EncryptedData il cui EncryptedContentInfo omette il campo opzionale encryptedContent. Le versioni...

CVE-2026-75125 PLANET GS-4210-16P2S Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

EUVD-2026-67785

PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted reque...

CVE-2026-75125

PLANET GS-4210-16P2S managed PoE switches running firmware before 3.441b260626 are affected by an authenticated null pointer dereference in /cgi-bin/dispatcher.cgi. Specifically, the web_poe_alive_rmtip_post handler dereferences the rmtIP parameter without checking for its presence. A remote auth...

IOFireWireFamily-null-deref

IOFireWireFamily-null-deref IOFireWireFamily-null-deref è un proof-of-concept exploit per CVE-2017-2388, un dereferenziamento di puntatore NULL in IOFireWireUserClient che è stato corretto in macOS Sierra 10.12.4. Questa vulnerabilità può essere attivata per causare denial of service su dispositi...

NFSundown

Panoramica Proof-of-Concept di exploit per NFSundown CVE-2025-38089. Può attivare remotamente un crash del kernel in un server NFS. Dettagli Un attaccante remoto può attivare un dereferenziamento di puntatore nullo del kernel e causare un crash del kernel inviando una richiesta RPC appositamente...

practice-22-23

Projekt Zum Starten: ./script.sh Repository auf GitHub - https://github.com/LaCinquette/practice-22-23 Durchführung 1. Für die Suche nach einer Schwachstelle habe ich das Projekt FFmpeg ausgewählt. Ich fand darin einen Commit, der den Anforderungen entsprach, nämlich: Entsprach dem Typ CWE-476 -...

CVE-2022-34556

Beschreibung von CVE-2022-34556 In PicoC v3.2.2 wurde eine NULL-Pointer-Dereferenzierung in variable.c entdeckt. Alle Projekte oder Bibliotheken, die Picoc verwenden, sind ebenfalls von diesem Problem betroffen. Ein Beispiel dafür wäre picoc-js. Einrichtung unserer Umgebung Um die...

CVE-2026-38344

A flaw was found in FFmpeg. This vulnerability involves a NULL pointer dereference within the getminbuffersize function when processing specially crafted video files. An attacker could exploit this by providing a malicious video file, leading to a Denial of Service DoS. A Denial of Service attack...

POC-CVE-2024-12227

CVE-2024-12227 - NTIOLibX64.sys DoS PoC Proof of Concept für CVE-2024-12227 - Nullzeiger-Dereferenzierungs-Sicherheitslücke im NTIOLibX64.sys-Treiber von MSI Dragon Center. Beschreibung NTIOLibX64.sys Version 3.0.0.10 enthält eine Nullzeiger-Dereferenzierungs-Sicherheitslücke in der...