CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 & CVE-2026-21048 — PoC di scrittura OOB nel libimagecodec.quram.so di Samsung Panoramica Questo repository contiene file Proof-of-Concept PoC concettuali che dimostrano vulnerabilità di scrittura fuori dai limiti OOB nella libreria codec immagini Quramsoft libimagecodec.quram.so...

CVE-2026-74664

A flaw was found in the Linux kernel's Open vSwitch component. When processing flow updates, the ovsflowcmdnew function preallocates a reply buffer based on the request's flow identifier. If a shorter User Flow ID UFID is provided, but the system matches an existing flow with a longer key...

CVE-2026-74729

A flaw was found in the Linux kernel's Aspeed Low Pin Count LPC snoop driver. This vulnerability arises from a lack of synchronization during concurrent access to a kernel First-In, First-Out kfifo buffer. A local attacker could exploit this by triggering a race condition, leading to a usercopy...

nginx-rift-private-lab

NGINX Rift Prova de conceito de RCE para CVE-2026-42945 , um overflow crítico de heap buffer no ngxhttprewritemodule do NGINX introduzido em 2008. O bug permite execução remota de código não autenticada contra servidores que usam as diretivas rewrite e set. Este fork estende o PoC original com um...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ROOT-OS-DEBIAN-13-CVE-2026-56372 CVE-2026-56372 in imagemagick - Patched by Root

Root has patched CVE-2026-56372 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61857 CVE-2026-61857 in imagemagick - Patched by Root

Root has patched CVE-2026-61857 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-61861 CVE-2026-61861 in imagemagick - Patched by Root

Root has patched CVE-2026-61861 in the imagemagick package for Root:Debian:13. Multiple fixed versions available...

CVE-2025-55780

CVE-2025-55780 Dereferenziazione di puntatore nullo nella funzione di rendering EPUB di MuPDF 1.26.4 Riferimento CVE - CVE-2025-55780 Versioni interessate : 1.26.7 e precedenti sono interessate Trovata e testata su : 1.26.4 Punteggio di gravità CVSSv3 : 7.5 Alta Corretto nel commit :...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

katana

कटाना 2016 से 2019 के बीच जारी Qualcomm उपकरणों के लिए एक BootROM शोषण।. शोषण का संक्षिप्त विवरण MSM8998 Nazgul SoC के साथ, कमांड 0x13 SAHARARESETSTATEMACHINEID जोड़ा गया था। यह कमांड bootsaharaentry में कॉल करता है, जो Sahara को पुनःआरंभ करने वाला है। दोष यह है कि इसमें प्रत्येक कॉल स्टैक पॉइंटर...

ROOT-OS-DEBIAN-13-CVE-2026-5450 CVE-2026-5450 in glibc - Patched by Root

Root has patched CVE-2026-5450 in the glibc package for Root:Debian:13. Multiple fixed versions available...

ROOT-OS-DEBIAN-13-CVE-2026-5928 CVE-2026-5928 in glibc - Patched by Root

Root has patched CVE-2026-5928 in the glibc package for Root:Debian:13. Multiple fixed versions available...

gosentry

gosentry gosentry è un fork della toolchain Go incentrato sulla sicurezza, che integra numerose funzionalità per campagne di fuzzing all'avanguardia su codebase Go. Se prima usavi go test -fuzz, dovresti usare gosentry come sostituto. Include vari miglioramenti per il fuzzing e rilevatori di bug...

ioctlance

IOCTLance Description Presented at CODE BLUE 2023, this project titled Enhanced Vulnerability Hunting in WDM Drivers with Symbolic Execution and Taint Analysis introduces IOCTLance, a tool that enhances its capacity to detect various vulnerability types in Windows Driver Model WDM drivers. In a...

ROOT-OS-DEBIAN-13-CVE-2026-56409 CVE-2026-56409 in expat - Patched by Root

Root has patched CVE-2026-56409 in the expat package for Root:Debian:13. Multiple fixed versions available...

FreeRDP: FreeRDP: Remote code execution or denial of service via audio input integer overflow

A flaw was found in FreeRDP, an open-source implementation of the Remote Desktop Protocol RDP. This vulnerability, an integer overflow in the audio input redirection channel, allows a remote attacker to supply a malicious FramesPerPacket value. This can lead to a heap-based buffer overflow,...

Important: Red Hat Security Advisory: freerdp security update

An update for freerdp is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...