wasm2c-tableflip

wasm2c 沙箱逃逸：访客模块在主机上运行 shell 命令 阅读博客：trustsig.eu/blog wasm2c/wasm-rt-impl-tableops.inc 中的 wasmrtallocatefuncreftable 会根据模块声明的元素数量设置 table-size，然后忽略 calloc 的结果。当分配失败时，表会留下 data == NULL 以及完整的声明 size，因此所有边界检查仍会通过，而 table-datai 会变成绝对地址 i sizeofwasmrtfuncreft。 元素数量来自访客，因此访客可以选择分配大小并强制分配失败。 复现 git clon...

CVE-2026-63686

The Apache HTTP Server (versions before 2.4.69 ) is vulnerable to a NULL pointer dereference within the mod_xml2enc module. An untrusted backend server can trigger a Denial of Service (DoS) by returning a crafted response with a character set that partially succeeds and then fails during conversi...

CVE-2026-63686 Apache HTTP Server: mod_xml2enc crash on charset conversion failure

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

EUVD-2026-90912

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

CVE-2026-63686

A NULL pointer dereference in modxml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows an untrusted backend server to cause a denial of service via a proxied response with a charset whose conversion partially succeeds then fails. Users are recommended to...

DEBIAN-CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729 Apache HTTP Server: mod_heartmonitor denial of service

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

EUVD-2026-90887

NULL Pointer Dereference vulnerability in Apache HTTP Servers modheartmonitor over unicast listener. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.68...

CVE-2026-46729

Apache HTTP Server versions 2.4.0 through 2.4.68 are vulnerable to a NULL Pointer Dereference within the mod_heartmonitor module. The flaw occurs over a unicast listener , which can lead to a denial of service (DoS) condition. While the vulnerability is confirmed to impact availability, specific ...

CVE-2026-45729

CVE-2026-45729 — ThorVG 通过恶意 SVG 导致的空指针解引用 严重程度： CVSS 4.3（中等） — CWE-476 安全公告： GHSA-f863-8ghq-7h64 已修复版本： ThorVG v1.0.5 状态： 已修补 / 已公开披露 摘要 ThorVG 的 SVG 解析器在处理根 节点内部截断的子元素标签时，解引用了一个从未初始化的指针。此漏洞可通过正常的渲染路径（tvg::Picture::load → 解析 → 渲染）触发，且只需 6 字节 的输入即可触发。 在标准 Linux 系统上，最坏情况是进程崩溃（DoS）—— mmapminaddr 阻止...

practice-22-23

Proyecto Para ejecutar: ./script.sh Repositorio en GitHub - https://github.com/LaCinquette/practice-22-23 Desarrollo 1. Para buscar la vulnerabilidad elegí el proyecto FFmpeg. Encontré en él un commit que cumplía los requisitos, a saber: Correspondía al tipo CWE-476 - desreferencia de puntero nul...

cve-2021-3449

CVE-2021-3449 OpenSSL 该问题于 2021 年 3 月 17 日由诺基亚报告给 OpenSSL。修复由 Peter Kästle 和 Samuel Sapalski（诺基亚）开发。 缓解措施 已知的唯一修复方法是更新 libssl1.1。 即使某些应用默认使用强化 TLS 配置禁用了 TLS 重新协商， 如果它们运行在旧版 OpenSSL 上，仍然会受到此漏洞的影响。 利用代码 main.go 是一个小巧的脚本，它连接到一个 TLS 服务器，强制重新协商，然后断开连接。 利用代码被注入到 Go 1.14.15 捆绑的 encoding/tls 包中。 你可以在...

BIT-PGBOUNCER-2026-19888 NULL pointer dereference in SCRAM client-final-message parsing in PgBouncer

Missing validation of a mandatory attribute in the SCRAM client-final-message parser in PgBouncer through 1.25.2 allows an unauthenticated remote attacker to crash the process. A malformed message can make the parser report success while leaving a required value unset, which is then dereferenced ...

Rocky Linux 9 [CIQ] Security Update: glibc / glibc-all-langpacks / glibc-benchtests / etc Multiple Vulnerabilities (crlsa-2024_3339)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20243339 advisory. glibc: Out of bounds write in iconv conversion to ISO-2022-CN-EXT CVE-2024-2961 glibc: stack-based buffer overflow in netgroup cache CVE-2024-33599 glibc:...

Rocky Linux 9.6 [TuxCare] Security Update: kernel / kernel-abi-stablelists / kernel-core / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1786824415)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1786824415 advisory. - In the Linux kernel, the following vulnerability has been resolved: CDC-NCM: avoid overflow in sanity checking A broken device m...

Rocky Linux 9 [CIQ] Security Update: krb5-debuginfo / krb5-debugsource / krb5-devel / krb5-libs / etc Multiple Vulnerabilities (crlsa-2026_19357)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619357 advisory. krb5: MIT Kerberos 5 krb5: Denial of Service via integer underflow and out-of-bounds read CVE-2026-40356 krb5: MIT Kerberos 5: Denial of Service via NULL...

Rocky Linux 9 [CIQ] Security Update: httpd / httpd-core / httpd-core-debuginfo / httpd-debuginfo / etc Multiple Vulnerabilities (crlsa-2024_4726)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20244726 advisory. httpd: Improper escaping of output in modrewrite CVE-2024-38475 httpd: Substitution encoding issue in modrewrite CVE-2024-38474 httpd: null pointer...

Rocky Linux 10.2 [CIQ] Security Update: 389-ds-base / 389-ds-base-bdb / 389-ds-base-bdb-debuginfo / etc Multiple Vulnerabilities (crlsa-2026_55424)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655424 advisory. 389-ds-base: 389-ds-base: pre-auth LDAP filter injection in CleanAllRUV status check CVE-2026-11770 389-ds-base: 389-ds-base: NULL pointer dereference ...