CVE-2026-86714

PX4 Autopilot through version 1.17.0 is affected by a stack buffer over-read in the netman system command, which fails to validate the length of interface names. An attacker within the adjacent network segment can supply interface names of 74 bytes or more via the -i option to read beyond buffer ...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Древний родственник Heartbleed, скрывавшийся в Squid с 1997 года. ✨ Возможности Однофайловый PoC — без зависимостей Вредоносный FTP-сервер, имитирующий баннер NetWare + усечённый ответ LIST Обнаружение и декодирование в реальном времени Basic Auth + Bearer токенов...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3386)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-3261)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an...

EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-3336)

According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an...

EulerOS 2.0 SP12 : shim (EulerOS-SA-2026-3311)

According to the versions of the shim package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary:...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ 공개 상태: 이 저장소의 모든 발견 사항은 2026년 5월–6월 사이에 HPE Networking 버그 바운티 프로그램Bugcrowd에 제출되었습니다. 6건의 제출 중 5건이 제출된 증거에 대한 기술적 검토 없이 트라이지 단계에서 "해당 없음Not Applicable"으로 종결되었습니다. 2026년 6월 현재 수정 사항은 발행되지 않았습니다. 전체 라이트업 소스 https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/...

cve-2022-21877

POC CVE-2022-21877 이 저장소는 Quang Linh가 STAR Labs에서 근무 중 발견한 CVE-2022-21877에 대한 POC를 포함합니다. 이는 spaceport.sys 드라이버 내에서 발견된 정보 유출입니다. 관련 블로그 게시물은 이 주소에서 확인할 수 있습니다. 사용 방법 POC를 빌드하려면 .\build를 실행하기만 하면 됩니다. 실행하려면 머신에 Tier를 얻을 수 있는 풀이 필요합니다. 제 테스트에서는 적어도 두 개의 스토리지 풀원시 풀과 다른 하나이 있어야 합니다. 이는 원시 풀에는 Tier를...

HeartLeak

HeartLeak 또 하나의, 가장 이슈가 되었던 버그를 위한 익스플로잇 스크립트입니다. 이 스크립트는 두 가지 기능을 제공합니다: scan: 무작위 호스트IP 주소를 생성하고, OpenSSL을 지원하는지 확인하며, CVE-2014-0160Heartbeat 버퍼 초과 읽기 버그에 취약한지 테스트한 후 취약한 호스트를 TXT 파일에 저장합니다. monitor: 악의적인 heartbeat 요청을 계속 보내면서 유출된 데이터를 파일에 "그대로" 덤프합니다. 또한 인쇄 가능한 데이터를 찾아 TXT 파일에 저장하고 화면에 표시합니다...

UBUNTU-CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in t...

CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in t...

cve-2025-5915

CVE-2025-5915 — libarchive RAR v4 힙 오버리드 실기기 iOS 18.5 증명 포함 libarchive의 RAR v4 필터 경로copyfromlzsswindow에서 통제된 힙 오버리드 / 메모리 노출 취약점. 이 저장소는 이를 처음부터 끝까지 재현합니다: 로컬 ASan, 누출 크기를 조절하는 처음부터 작성한 RAR v4 인코더, 그리고 휴대폰 자체 시스템 libarchive.2.dylib을 사용하는 iOS 18.5 실기기 데모. 버그 : parsefilter가 필터 blocklengthRAR-VM...

Linux Distros Unpatched Vulnerability : CVE-2025-15614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malform...

CVE-2026-18238

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

EUVD-2026-72021

The rpcap client code that processes a RPCAPMSGPACKET message received from the server incorrectly validates its headers. A malicious server can send a crafted message and cause the client to treat up to 20 bytes of the client process memory beyond the end of the buffer as if it was a part of the...

CVE-2019-19204

CVE-2019-19204 Проблема была обнаружена в Oniguruma 6.x до версии 6.9.4rc2. В функции fetchintervalquantifier ранее известной как fetchrangequantifier в файле regparse.c вызов PFETCH происходит без проверки PEND. Это приводит к чтению за пределами буфера в куче. Исследователь: ManhND из команды...

DEBIAN-CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614 ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

CVE-2025-15614

ugrep before 7.6.0 is affected by a heap buffer over-read in its LZW decompressor (src/zopen.c) when processing crafted .Z archive files. The decompressor reads one byte past the allocated heap buffer , which can cause a process crash. The vulnerability requires a local attack vector and user int...