CVE-2023-21554

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing 概念验证代码， PoC成功的标志是 mqsvc.exe 进程崩溃，并且没有弹出消息提示，需要借助类似进程监视器的程序来观察。 在 Windows 终端或命令提示符中执行命令 python poc.py 输入受害者PC的IP地址并按回车。...

CVE-2026-16172

CVE-2026-16172 affects the Endpoint DLP (EPDLP) service of the Netskope Client , where an out-of-bounds heap read occurs due to a missing bounds check on a specially crafted message. A local standard user can trigger the flaw, causing the kernel driver handler to crash and potentially interruptin...

httpd: mod_authn_socache: NULL pointer dereference can cause a child process crash

A flaw was found in the modauthnsocache module of httpd. This vulnerability allows an unauthenticated remote user to crash a child process due to a NULL pointer dereference when the server is operating in a caching forward proxy configuration...

PT-2026-89421

ION-DTN before 4.2.1-a.1 contains a denial of service vulnerability that allows unauthenticated remote attackers to crash the ION process by sending a BPv7 bundle with a zero-length payload. The canonicalizePayloadBlock function in bpsec util.c passes bundle-payload.length to zco clone without...

Chrome-Skia-CVE-2024-8636

修复于 Chrome M128：https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html 复现步骤： 1. 将 chromium.diff 补丁应用到 chromium。 2. 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 3. 构建并启动浏览器。 4. 打开 index.html 触发 PoC。 5. GPU 进程将崩溃。...

CVE-2023-21554-PoC

CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC，分析见 https://www.zoemurmure.top/posts/cve202321554/ poc 文件执行前需要自行修改目标机器 IP 地址 poc 成功的标志是 mqsvc.exe 进程的崩溃，并没有弹窗信息，需要在类似进程监控器的程序里看到...

EUVD-2026-74296

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

CVE-2026-86564

A flaw in DPDK lib/vhost results from missing length validation before reading command_data in the virtio-net control-queue handler , which can cause an out-of-bounds read and a host process crash . The CVSS v3.1 score is 3.3 (LOW) , with a local attack vector, low privileges required, no user in...

CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash...

CVE-2026-86564

A flaw was found in DPDK lib/vhost. Missing length validation before reading commanddata in the virtio-net control-queue handler can cause an out-of-bounds read and a host process crash. Mitigation No mitigation is currently available...

UBUNTU-CVE-2026-19534

undicis WebSocket client crashes the whole Node.js process during the...

Chrome-Skia-CVE-2024-8198

已在 Chrome M128 中修复：https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html 复现步骤： 1. 将 chromium.diff 补丁应用到 chromium。 2. 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 3. 构建并启动浏览器。 4. 打开 index.html 触发 PoC。 5. GPU 进程将会崩溃。...

Chrome-Skia-CVE-2024-7966

在 Chrome M128 中修复：https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html 复现步骤： root@kitploit: 将 chromium.diff 补丁应用到 chromium。 运行 genskpic.py 生成 drawablepicture.skp.hh，然后将生成的文件移动到 src/gpu/commandbuffer/client。 构建并启动浏览器。 打开任意页面以触发 PoC。 GPU 进程将崩溃。...

CVE-2025-15647

CDT before 1.4.5 contains an out-of-bounds read vulnerability in the opposedVertexInd function when constraint edge intersections are computed in floating point and round outside adjacent triangles. Attackers can supply nearly-degenerate constraint edges through geometry data to trigger an...

DEBIAN-CVE-2026-19534

undici's WebSocket client crashes the whole Node.js process during the opening handshake when a server responds with a subprotocol that the client never requested. A default WebSocket connection sends no subprotocol, but if the server's 101 response includes a Sec-WebSocket-Protocol header, undic...

CVE-2026-19534

A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service DoS. Mitigation Mitigation...

CVE-2026-85014

undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close the internal socket-close handler calls abort on the writable stream unconditionally and discards the returned...

CVE-2026-85014

undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close the internal socket-close handler calls abort on the writable stream unconditionally and discards the returned...

CVE-2026-85014 undici vulnerable to Denial of Service via WebSocketStream unclean close

undici's experimental WebSocketStream client crashes the whole Node.js process when a remote peer closes the TCP connection without a WebSocket close handshake. On an unclean close the internal socket-close handler calls abort on the writable stream unconditionally and discards the returned...

CVE-2026-85534 Libsoup: libsoup: http/2 client crash in on_data_source_read_callback when settings initial_window_size shrinks during deferred body read

A flaw was found in libsoup. When a client sends an HTTP/2 request body from a non-pollable input stream, the library can buffer more data than the current flow-control window later allows. A malicious HTTP/2 server can shrink SETTINGSINITIALWINDOWSIZE while that buffered read is still in progres...