CVE-2026-74747

A flaw was found in the Linux kernel's IP Virtual Server IPVS component. A local attacker can manipulate the IP Header Length ihl field within network packets. This manipulation can lead to an out-of-bounds access when the kernel attempts to revalidate embedded headers, potentially causing system...

CVE-2025-51495

Ich möchte eine Sicherheitslücke melden, die in der neuesten Version von Mongoose v7.17 identifiziert wurde. Das Problem befindet sich im WebSocket-Modul, genauer gesagt in der Funktion mgwscb, die für die Verarbeitung eingehender WebSocket-Frames zuständig ist. Die Funktion ist anfällig für eine...

CVE-2026-21001-WebAssembly-Linear-Memory-OOB-via-Table-Index-Confusion

CVE-2026-21001 – WebAssembly Linearer Speicher OOB durch Tabellenindex-Verwechslung Überblick Ein WebAssembly-Modul verwendet eine importierte Funktion ohne Grenzüberprüfung bei einem Array-Index. Ein Angreifer kann einen Index außerhalb der Grenzen angeben, um außerhalb des linearen Speichers zu...

EUVD-2026-66577

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

EUVD-2026-66567

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2021-21220

Exploitation of CVE-2021-21220 गलत JIT व्यवहार से रिमोट कोड निष्पादन तक अवलोकन यह प्रस्तुति CVE-2021-21220 के शोषण की व्याख्या करती है, जो Google Chrome के V8 JavaScript इंजन में एक भेद्यता है, जो अनुकूलन के दौरान गलत JIT कंपाइलर धारणाओं के कारण उत्पन्न हुई है। प्रस्तुति निम्नलिखित बिंदुओं से...

CVE-2022-1015

CVE-2022-1015 alvo: linux kernel 5.17.0 configuração: .config requisitos: root@kitploit: apt install libmnl-dev libnftnl-dev compilar: root@kitploit: gcc exploit.c -o exploit -lmnl -lnftnl -lpthread -no-pie Referências...

CVE-2024-1939

CVE-2024-1939 Dies ist ein kurzer Writeup für die CVE-2024-1939, mit dem ich V8CTF M122 beanspruchte. Die Ursache dieses Problems ist die fehlende Unterstützung für kWasmS128 bei der Konvertierung von Wasm zu JS. Insbesondere werden wasmS128Const-Operationen, die in Parameter-Stacks auftreten,...

cve-2024-0519-rca-research

CVE-2024-0519 — أبحاث RCA مصنّفات تحليل السبب الجذري لـ CVE-2024-0519 وصول خارج النطاق للذاكرة في V8، كروم 120، تم استغلاله في البرية. الإصلاح : e0f2a195d87c9a06685121e0e783efd92d030df3 — Toon Verwaest، 2024-01-12 إصدار V8 المدروس : 12.0.267.16 fbc4963bbff، ARM64 macOS الملفات...

CVE-2025-40019-POC

CVE-2025-40019 के लिए प्रूफ ऑफ कॉन्सेप्ट CVE-2025-40019 एन्क्रिप्टेड सॉल्ट-सेक्टर इनिशियलाइज़ेशन वेक्टर मैकेनिज़्म crypto/essiv.c है जिसमें इनिशियलाइज़ेशन वेक्टर IV आकार के सापेक्ष एसोसिएटेड ऑथेंटिकेशन डेटा AAD लंबाई का अपर्याप्त सत्यापन होता है, जिससे आउट-ऑफ-बाउंड्स मेमोरी एक्सेस होती है। इस...

CVE-2021-1732

CVE-2021-1732 Die Schwachstelle tritt in der Windows-Grafiktreiberfunktion win32kfull!NtUserCreateWindowEx auf, verursacht durch eine fehlende Synchronisation zwischen der Kernel-Rückruffunktion zur Speicherzuweisung im Benutzermodus und der Einstellung der tagWND-flag-Eigenschaft. Dadurch kann d...

CVE-2021-32537

CVE-2021-32537: RTKVHD64 में सीमा-से-बाहर पहुँच जिससे पूल दूषण पूल कोरप्शन होता है। यह एक बग है जिसकी मैंने अप्रैल 2021 की शुरुआत में Realtek को सूचना दी थी। प्रभावित ड्राइवर का नाम RTKVHD64.sys है और यह कई मुख्यधारा हार्डवेयर पर उपलब्ध प्रतीत होता है नीचे दिए गए हार्डवेयर कॉन्फ़िगरेशन का परीक्षण...

CVE-2019-9810

CVE-2019-9810 Windows 版 Firefox 利用程序 CVE-2019-9810 是一个由 Richard Zhu 和 Amat Cama 在 Pwn2Own 2019 上发现并利用的漏洞。它影响了 Mozilla 的 JavaScript 引擎 Spidermonkey，并被用于实现渲染进程的攻破。 该问题已于大约两个月前在 mfsa2019-09 中修复。 问题概述 简而言之，该漏洞使得边界检查判定为冗余并被优化掉，从而允许代码访问越界内存。问题本身出在 Ion 管道的别名分析阶段。下图展示了 GVN...

CVE-2026-80583

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODE" to "DEC7 MODE" controls are enumerated, but txmacrodecmodeget and txmacrodecmodeput access their value through ucontrol-value.integer.value0 a long instead ...

CVE-2026-74747

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-74737

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-80583 ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses

In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses The "DEC0 MODE" to "DEC7 MODE" controls are enumerated, but txmacrodecmodeget and txmacrodecmodeput access their value through ucontrol-value.integer.value0 a long instead ...

CVE-2026-80566

This Linux kernel vulnerability affects the hynitron_cstxxx input driver. The root cause is insufficient validation of touch count and finger IDs against the allocated input slot range before processing touch reports. An out-of-range finger ID or an oversized touch count can corrupt the touch sta...

CVE-2026-74747 ipvs: revalidate ihl to prevent out-of-bounds access

In the Linux kernel, the following vulnerability has been resolved: ipvs: revalidate ihl to prevent out-of-bounds access While the outer IP header is already pulled into the skb head, we must be careful and revalidate the embedded headers after reading them from the skb frags to prevent...

CVE-2026-74747

CVE-2026-74747 affects the Linux kernel in the ipvs (IP Virtual Server) subsystem, specifically in ip_vs_nat_icmp() . After reading embedded IP headers from skb frags, the ihl field is not revalidated; a local process can modify it so that after skb_ensure_writable() a larger value is visible, ca...