399 matches found
anamnesis-release
Anamnesis: LLMを用いたエクスプロイト生成評価 このリポジトリには、LLMエージェントが脆弱性レポートからエクスプロイトを生成する際の、エクスプロイト緩和策の存在下における能力を評価するためのフレームワークが含まれています。バグレポートと概念実証トリガーが与えられると、エージェントは脆弱なソフトウェアを分析し、様々なセキュリティ緩和策を回避する動作するエクスプロイトを生成します。 実験では、QuickJSのゼロデイ脆弱性を出発点として、Opus...
SUSE CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
Linux Distros Unpatched Vulnerability : CVE-2026-88378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag. CVE-2026-88378 Note that Nessus relies on the presence of the packa...
DEBIAN-CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
UBUNTU-CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378: Undefined Security Weakness
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
The QuickJS engine (commit 04be24600) is affected by a heap out-of-bounds write condition located in the JS_ReadFunctionTag() function. This vulnerability is present in various Linux distributions, though some sources indicate that a vendor-supplied patch may not be available for certain impacted...
EUVD-2026-86272
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
CVE-2026-88378
QuickJS commit 04be24600 contains a heap out-of-bounds write condition in JSReadFunctionTag...
PT-2026-97929
Name of the Vulnerable Software and Affected Versions QuickJS version 04be24600 Description A heap out-of-bounds write condition exists in the JS ReadFunctionTag function. A heap out-of-bounds write occurs when a program writes data past the end of a memory buffer allocated on the heap, which can...
Linux Distros Unpatched Vulnerability : CVE-2026-18329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an...
SUSE CVE-2026-18329
Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...
Linux Distros Unpatched Vulnerability : CVE-2026-78689
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX JavaScript njs has a vulnerability in the XML module's namespace prefix list parser, reachable through the xml.exclusiveC14n method. An...
CVE-2026-18329
Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...
UBUNTU-CVE-2026-18329
Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...
CVE-2026-18329
Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an exception is thrown during asynchronous access-control evaluation before an explicit access denial is returned. An unauthenticated attacker ca...