4154 matches found
CVE-2023-21554-PoC
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC, analysis at https://www.zoemurmure.top/posts/cve202321554/ Before executing the PoC file, modify the target machine IP address manually. The sign of a successful PoC is the crash of the mqsvc.exe process. There is no pop-up information...
CVE-2023-21554
CVE-2023-21554-PoC CVE-2023-21554 Windows MessageQueuing PoC， The sign of Poc success is the crash of the mqsvc.exe process, and there is no pop-up message, which needs to be seen in a process monitor-like program Execute command in windows terminal or command prompt python poc.py Enter IP addres...
Chrome-Skia-CVE-2024-8636
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/09/stable-channel-update-for-desktop10.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...
EUVD-2026-125052
GPAC through 26.07.0 contains a use-after-free vulnerability in gfsgprotodel in src/scenegraph/vrmlproto.c because gfsgreset frees unregistered prototypes still referenced by scene commands. Attackers can supply a crafted XMT/BT scene declaring prototypes via commands, processed by MP4Box -chap, ...
CVE-2026-128240
GPAC versions through 26.07.0 are vulnerable to a use-after-free vulnerability in the gf_sg_proto_del() function located in src/scenegraph/vrml_proto.c. The root cause is that gf_sg_reset() frees unregistered prototypes that are still referenced by scene commands. An attacker can provide a crafte...
Chrome-Skia-CVE-2024-8198
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop28.html Steps to reproduce: 1. Apply the chromium.diff patch to chromium. 2. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. 3...
@hono/node-server: Unhandled `ECONNRESET` on the socket during an asynchronous WebSocket upgrade crashes the process
Summary While @hono/node-server waits for the Hono application to handle a WebSocket upgrade request, the socket has no error listener. If the client resets the TCP connection during that time, the resulting ECONNRESET is emitted as an unhandled 'error' event and the process terminates. Details T...
CVE-2026-126345
basic-ftp is an FTP client for Node.js. Prior to 6.2.4, the MLSD directory-listing parser in src/parseListMLSD.ts uses untrusted fact names from the FTP server as keys in the plain-object factHandlersByName dictionary without checking that the resolved property is an own handler. A fact named pro...
CVE-2026-124023 Apache Axis2/C: Out-of-bounds read in the Guththila XML reader wrapper
Out-of-bounds Read vulnerability in the Guththila XML parser wrapper of Apache Axis2/C. On some malformed XML input the Guththila parser returned a raw input byte in place of an event code, and the AXIOM reader wrapper used that value as an index into a ten-entry lookup table without checking its...
Chrome-Skia-CVE-2024-7966
Fixed in Chrome M128: https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop21.html Steps to reproduce: Apply the chromium.diff patch to chromium. Run genskpic.py to generate drawablepicture.skp.hh, then move the generated file to src/gpu/commandbuffer/client. Build and...
SUSE SLES15 Security Update : aliyun-cli (SUSE-SU-2026:5195-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:5195-1 advisory. - CVE-2026-63209: github.com/klauspost/compress: signed integer overflow in s2.NewDict allows an attacker to bypass repeat index...
CVE-2026-106023
modmd NULL pointer dereference leads to child process crash...
UBUNTU-CVE-2026-106023
modmd NULL pointer dereference leads to child process crash...
CVE-2026-123367
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...
UBUNTU-CVE-2026-100290
The regcomp and regexec functions in the GNU C Library version 2.3 to version 2.44 may read freed memory and free the same heap block twice when a memory allocation fails while a regular expression is compiled or matched. The redfaaddnode the NFA node table and buildrangeexp bracket ranges grow...
UBUNTU-CVE-2026-123367
Thor Vector Graphics ThorVG is a production-ready vector graphics engine. Prior to 1.1.2, the bundled jpgd JPEG decoder accepts duplicate component selectors in an SOS scan header, causing each duplicate to increase mblockspermcu without checking the buffers sized from the frame components. A...
PT-2026-146093
Name of the Vulnerable Software and Affected Versions Pillow versions 2.3.0 through 12.3.0 Description Applications using this Python imaging library to save compressed TIFF images via libtiff may pass attacker-controlled image geometry tags to the encoder. The TiffImagePlugin. save path allows t...
Amazon Linux 2 : httpd (ALAS-2026-4114)
The version of httpd installed on the remote host is prior to 2.4.71-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-4114 advisory. modmd NULL pointer dereference leads to child process crash CVE-2026-106023 modvhostalias 1 byte stack buffer overwrite aft...
CVE-2026-0326 PAN-OS: Buffer Overflow Vulnerability in Protocol and Service Processing
A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability...
EUVD-2026-123796
A buffer overflow vulnerability in Palo Alto Networks PAN-OS software enables an unauthenticated attacker to disrupt service processing by causing a service process crash or memory corruption. Panorama and Prisma® Access are not affected by this vulnerability...