4131 matches found
ROOT-APP-GOBINARY-CVE-2026-33186 CVE-2026-33186 in google.golang.org/grpc - Patched by Root
Root has patched CVE-2026-33186 in the google.golang.org/grpc package for Root:Go. Multiple fixed versions available...
sccm_sql_backdoor
sccmsqlbackdoor A proof‑of‑concept tool that implants a controlled backdoor into a Management Point stored procedure, enabling indirect SQL execution through a legitimate MP HTTP service. Installation You can install by cloning the repository and installing the dependencies. root@kitploit: $ git...
CVE-2015-4870
CVE-2015-4870 MySQL DoS in the Procedure Analyse Function – CVE-2015-4870 Write-up: https://osandamalith.wordpress.com/2016/05/29/mysql-dos-in-the-procedure-analyse-function-cve-2015-4870/ Video: https://www.youtube.com/watch?v=zE-TsQVn9oI...
CveTest
CveTest Test case to replicate Node.JS V0.10.31 v8 backport CVE-2013-6668 crash. Test calls a SQL stored procedure "GetSomething" to retrieve data from a table "Table1" in "SQLDB" database. Crash occurs when there is more than 52 rows returned and after making the same call several times...
EUVD-2026-80811
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from public invite links to retrieve sensitive invitee information...
CVE-2026-80225
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that can stream and sustain a rate of distinct uncached names over the TCP/DoT connection, monopolize...
CVE-2026-92565: Exposure of Private Personal Information to an Unauthorized Actor
Rallly before 4.15.0 contains an information disclosure vulnerability in the polls.get tRPC procedure that returns scheduled-event invitee names and email addresses to unauthenticated callers. Attackers can access a poll's urlId from public invite links to retrieve sensitive invitee information...
Astra Linux – Vulnerability in Linux 5.10, Linux
The SUNRPC subsystem in the Linux kernel, up to version 5.17.2, can call the xsxprtfree function before ensuring that the sockets are in the intended state...
Astra Linux – Vulnerability in Samba
Netlogon RPC Elevation of Privilege Vulnerability...
Astra Linux – Vulnerability in Samba
A flaw was discovered in Samba’s DNS server. A authenticated user could exploit this flaw to cause damage to the RPC server. This RPC server, which also supports protocols other than dnsserver, will be restarted after a short delay. However, it is easy for an authenticated, non-administrative...
Astra Linux – Vulnerability in Samba
A flaw was discovered in the way Samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request and chose to fragment it, an attacker could replace the later fragments with their own data, thereby bypassing the signature requirements...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: arm64: ftrace: consistently handles PLTs. Sometimes it is necessary to use a PLT entry to call a ftrace trampoline. This is handled by ftracemakecall and ftracemakenop, both of which have almost identical logic. However, this is...
Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: In the tty subsystem, for the ngsm module, a race condition occurred during the modification of the status line of a dead connection. The gsmcleanupmux function cleans up the GSM-related resources by closing all Data Link Control...
Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: rxrpc: Fixed the issue where the listen function sets the backlog to too high for preallocation rings. The listen handler of AFRXRPC allows you to set the backlog to 32 if you increase the sysctl value. However, since the...
Astra Linux – Vulnerability in Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: rxrpc: Fixed the issue where the timer for starting a call race against the destruction of the call occurred. The rxrpccall structure contains a timer used to handle various timed events related to calls. This timer can be...
Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fixed an UAF in svctcplistendataready After the listener svcsock is freed, and before invoking svctcpaccept for the established child sock, there is a window during which the newsock may retain the freed listener svcsock ...
Astra Linux – Vulnerabilities in nghttp2, netty, tomcat9, jetty9, grpc
The HTTP/2 protocol allows for a denial of service server resource consumption, as request cancellation can quickly reset many streams, as exploited in practice from August to October 2023...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
In the Linux kernel, the following vulnerabilities have been resolved: SUNRPC: Fixed a server shutdown leak A race condition was addressed where kthreadstop might prevent threadfn from being called at all. If this occurs, the svcrqst will not be cleaned up properly...
Astra Linux – Vulnerability in Samba
An infinite loop vulnerability was discovered in Samba’s mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop failed to validate a field in the network packet that contains the count of elements in an array-li...
Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15
A race condition was detected in the Linux kernel’s RxRPC network protocol, during the processing of RxRPC bundles. This issue arises due to the lack of proper locking when performing operations on an object. This could allow an attacker to escalate privileges and execute arbitrary code within th...