CVE-2026-11645-Out-of-bounds-Read-Write

CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ 경고 이 코드는 교육 목적 및 승인된 테스트 전용입니다. 📋 설명 CVE-2026-11645는 Google Chrome의 V8 엔진에서 경계를 넘는 읽기 및 쓰기OOB 취약점입니다. 원격 공격자는 조작된 HTML 페이지를 통해 샌드박스 내에서 임의 코드를 실행할 수 있습니다. 기술 세부사항...

cve-2021-4034-mock

CVE-2021-4034 PwnKit 模擬脆弱性システム このプロジェクトは、Linux pkexec デーモンで発生した CVE-2021-4034 Out-of-Bounds Read/Write 脆弱性の核心的な動作原理を再現した模擬システムです。実際のSUID権限昇格なしに、制御された環境内で環境変数メモリ領域の侵害及び悪意のあるペイロード注入メカニズムを安全にシミュレートします。...

Moderate: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common...

CVE-2026-11645

CVE-2026-11645 - Google ChromeのV8におけるリモートコード実行脆弱性 簡単な使い方 root@kitploit: python3 exploit.py -t "C:\Path\To\Target" -o demo.zip --data-file payload.exe 悪用に関する注意点 重要度: HIGH CVSS: 8.8 影響: 機密性、完全性、可用性 公開日: 2026-06-09 技術概要 Google Chrome...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68642)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68642 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

Linux Distros Unpatched Vulnerability : CVE-2026-93201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: validate segid fields from persistent memory cacheposdecode, cachekeydecode and the last-kset branches of cachereplay, the writeback worker and the G...

DEBIAN-CVE-2026-93201

In the Linux kernel, the following vulnerability has been resolved: dm-pcache: validate segid fields from persistent memory cacheposdecode, cachekeydecode and the last-kset branches of cachereplay, the writeback worker and the GC worker take a cache segment id from the cache device metadata and...

CVE-2026-93201

CVE-2026-93201 affects the Linux kernel dm-pcache (persistent cache) subsystem. The functions cache_pos_decode(), cache_key_decode(), and the last-kset branches of cache_replay(), the writeback worker, and the GC worker index cache->segments[] using a segment ID read from on-disk metadata with...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, ...

Important: Red Hat Security Advisory: gstreamer1-plugins-good security update

An update for gstreamer1-plugins-good is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severit...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68644)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68644 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

RHEL 9 : gstreamer1-plugins-good (RHSA-2026:68645)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:68645 advisory. GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages conta...

CVE-2023-35001

nftables OOB読み取り/書き込みエクスプロイト CVE-2023-35001 pwn2own Vancouver 2023でUbuntuデスクトップに対して使用されたエクスプロイトです。このエクスプロイトはイベント開始時に利用可能だったカーネルバージョン5.19.0-35をサポートしています。 必要条件 Cコンパイラ Goコンパイラ 使用方法 root@kitploit: Build $ make Run $ ./exploit これにより、ターゲット上で解凍可能なlpe.zipファイルが生成されます。アーカイブには2つのバイナリが含まれています: wrapper :...

EUVD-2026-79128

A flaw was found in tftp-hpa. When the in.tftpd remap engine processes an inverse remap rule that also aborts with a non-empty custom error message, it can pass invalid match offsets to the genmatchstring function. This leads to out-of-bounds read/write operations. A remote, unauthenticated...

CVE-2026-85234

A flaw in tftp-hpa 's in.tftpd remap engine can trigger out-of-bounds read/write operations when an inverse remap rule that also aborts with a non-empty custom error message passes invalid match offsets to the genmatchstring() function. A remote, unauthenticated attacker can send a specially craf...

EUVD-2026-78634

FreeRDP versions before 3.31.0 fail to validate MonitorIds array values when parsing RDP connection files, allowing unbounded array indexing in xfdetectmonitors. Attackers can craft a malicious RDP file with an out-of-range selectedmonitors value to trigger out-of-bounds heap read and write...

DEBIAN-CVE-2026-81017

In the Linux kernel, the following vulnerability has been resolved: platform/chrome: sensorhub: Bound the EC-reported sensor number Each EC FIFO event carries an 8-bit sensor number in-sensornum. crosecsensorhubringhandler validates the FIFO event count, the per-read count and the ring bound, but...

CVE-2026-58941

CVE-2026-58941 affects multiple functions in iommu.c of the Android kernel . The root cause is an out-of-bounds read/write due to improper input validation, enabling local escalation of privilege with only low privileges required and no user interaction. The CVSS 3.1 score is 7.8 (HIGH) with high...

CVE-2026-57159

PJSIP is a free and open source multimedia communication library written in C. Prior to commit 673b978, a remote out-of-bounds read and write can occur in the SDP negotiator when the remote payload-type map maintenance feature is enabled. assignptandupdatemap in pjmedia/src/pjmedia/sdpneg.c uses...