php_hack

该工具利用一个名为 CVE-2019-11043 的漏洞（一个不安全的指针运算实例），以获取对配置不当的 PHP 服务器的访问权限。 可在此处下载（你需要从命令行运行它） 用法： phphack target IP target port...

CVE-2026-53706 PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs

PREVAIL is a Polynomial-Runtime EBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4, the prevail eBPF verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag. Because ALU32 arithmetic zero-extends the 32-bit...

CVE-2026-53706

PREVAIL is a Polynomial-Runtime eBPF Verifier using an Abstract Interpretation Layer. Prior to version 0.2.4 , the verifier accepts ALU32 ADD and SUB instructions that operate on pointer-typed registers without checking the is64 flag . Because ALU32 arithmetic zero-extends the 32-bit result, the ...

cve-2019-6250-lab

CVE-2019-6250 — libzmq 预认证 RCE 实验环境 针对 CVE-2019-6250 的端到端可用 RCE 利用链 + 可复现实验环境。该漏洞是 libzmq v2decodert::sizeready 中的预认证堆缓冲区溢出。通过 uint64t 指针算术溢出，未认证对等端可在 ZMTP/2.0 线上路径覆盖相邻的 msgt::contentt::ffn 函数指针，然后经由 TCP socket 关闭触发：v2decodert → inprogress.close → 。...

CVE-2026-74720

A flaw was found in the Linux kernel's Berkeley Packet Filter BPF component. When a scalar value is added to a pointer during certain arithmetic operations, the system fails to fully preserve the pointer's state. This inconsistency in how the pointer's origin and properties are tracked can lead t...

Astra Linux – Vulnerability in Linux

A issue was discovered in the Linux kernel through version 5.11.x. The kernel/bpf/verifier.c file contains unwanted out-of-bounds speculation during pointer arithmetic operations, which allows for side-channel attacks that circumvent Spectre mitigations and extract sensitive information from kern...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: BPF: Fixed the masking negation logic when dealing with a negative dst register. The negation logic for the case where the offreg is stored in the dst register is incorrect; therefore, we cannot simply invert the addition operati...

The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the imx8qm-hsio component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ceph kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the ceph kernel component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the driver/platform/x86/hp/hp-bioscfg/bioscfg.h component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the drivers/platform/x86/hp/hp-bioscfg/bioscfg.h component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the Linux operating system’s driver/dclk/clk-renesas-pcie.c component allows a hacker to cause a service failure.

The vulnerability of the drivers/clk/clk-renesas-pcie.c component of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the Linux operating system’s kernel’s media component, which allows a hacker to cause a service failure

The vulnerability of the Linux operating system’s kernel media component is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Linux operating system’s kernel, related to pointer arithmetic errors, allows a hacker to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

ANT-2026-8RX9XHEB · php/php-src · Memory Corruption / Out-of-Bounds Write

oob-write high Severity Claude high · Security research firm high · Maintainer - Discovered by Claude Mythos Preview REPORT Anthropic's analysis, sealed at approval. Disclosure to the maintainer was performed by Ada Logics. ANT-2026-8RX9XHEB: Heap out-of-bounds write in font loader via stride...

The vulnerability in the arch/powerpc/kernel/smp.c component of the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the arch/powerpc/kernel/smp.c component in the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the apparmor module in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the apparmor module in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the apparmor module in Linux operating systems is related to pointer arithmetic errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability in the driver/infiniband/sw/siw/siw_qp_rx.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/infiniband/sw/siw/siwqprx.c component of the Linux operating system is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability in the driver/net/ethernet/xscale/ixp4xx_eth.c component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability in the drivers/net/ethernet/xscale/ixp4xxeth.c component of the Linux kernel is related to pointer arithmetic errors. Exploiting this vulnerability could allow an attacker to cause a system failure...