nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service

A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...

nodejs: Node.js: Remote memory exhaustion via HTTP/2 retained header blocks

A flaw was found in Node.js's handling of HTTP/2. This vulnerability allows a remote attacker to bypass maxSessionMemory limits by sending specially crafted HTTP/2 retained header blocks. This can lead to memory exhaustion, resulting in a denial of service DoS for the affected system...

gst-plugins-good: gst-plugins-good: unbounded memory growth in rtph264depay and rtph265depay RTP depayloaders

A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP depayloader elements do not enforce a maximum size limit on the reassembly buffer used during fragmented RTP packet processing. A remote, unauthenticated attacker can send a continuous stream of RTP...

libxfont2: Font Server Client encoding[] Out-Of-Bounds Read/Write

A flaw was found in the libXfont2 font-server client. A remote attacker, by operating a malicious font server, could exploit an out-of-bounds read/write vulnerability. This occurs because the client incorrectly handles font data, leading to an out-of-bounds memory access. This can lead to privile...

libxfonts2: libXfont2: Privilege Escalation via Heap Buffer Overflow in Font Server Client

A flaw was found in the libXfont2 font-server client. This heap buffer overflow vulnerability allows a malicious font server to send specially crafted glyph data. The fsreadglyphs function fails to properly validate the total size of the incoming data, leading to an overwrite of memory beyond the...

CVE-2020-5236

Waitress 1.4.2 ReDoS - CVE-2020-5236 Waitress バージョン 1.4.2 は、Waitress が不正な文字を含むヘッダーを受信したとき、DOS 攻撃を許容します。"Bad-header: xxxxxxxxxxxxxxx\x10" のようなヘッダーを受信すると、正規表現エンジンが破滅的なバックトラッキングを引き起こし、プロセスが CPU 時間を 100% 使用して他の操作をすべてブロックします。これにより、攻撃者は不正なヘッダーを含む単一のリクエストを送信し、サービスをオフラインにすることができます。 NVD による 使用方法...

CVE-2013-5211

CVE-2013-5211 PoC Démon du protocole de temps réseau ntpd – Commande monlist activée – Déni de service DoS Ce script Python est utilisé pour détecter CVE-2013-5211, une vulnérabilité présente dans les serveurs NTP Network Time Protocol. En utilisant la commande monlist de ntpd, cette vulnérabilit...

CVE-2018-9539

CVE-2018-9539 Код proof-of-concept для CVE-2018-9539 Если у вас есть вопросы, можете написать мне в Twitter @tamirzb. Сборка Чтобы собрать это: 1. Загрузите исходный код Android. 2. Поместите этот репозиторий в AOSP/external. 3. Выполните следующие команды: root@kitploit: cd AOSP source...

CVE-2026-45404

A flaw was found in OpenTelemetry-Go. The OpenTracing bridge's bridgeSpan component contains an unsynchronized map, extraBaggageItems, which is not safe for concurrent access. When multiple operations, such as SetBaggageItem and correlation.MapFromContext, attempt to access this map simultaneousl...

CVE-2026-76763

A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...

CVE-2026-80720

A flaw was found in the iomap component of the Linux kernel. The iomapsplitioend function can cause a deadlock when it attempts to split bios that originate from iomapioendbioset and the bioset is exhausted. This can lead to a system hang, resulting in a Denial of Service DoS for affected systems...

CVE-2026-80696

A flaw was found in the Linux kernel's hwmon ltc4282 driver. This vulnerability occurs due to an out-of-bounds read when processing the minimum alarm voltage for the VGPIO channel, caused by a missing return statement. A local attacker could potentially exploit this to cause a denial of service o...

CVE-2026-80680

A flaw was found in the Linux kernel's i2c: amd-mp2 driver. During the registration of an I2C adapter, the driver may store a memory address pointer that later becomes invalid if the adapter registration fails. This can lead to the driver attempting to access this invalid memory location a "stale...

CVE-2026-80681

A flaw was found in the Linux kernel's vxlan component. A use-after-free vulnerability exists due to improper handling of the Ethernet header pointer after routeshortcircuit is called. When pskbmaypull reallocates the skb-head, the previously cached Ethernet header pointer becomes stale, leading ...

CVE-2026-80665

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM component for ARM64 architectures. The kvmhandlevncrabort function incorrectly assumes that a specific translation result always indicates an abort, even when kvmtranslatevncr returns an error for a Guest Frame Number GFN...

CVE-2026-80622

A flaw was found in the Linux kernel's tlclk driver. This vulnerability occurs due to improper module cleanup, where the driver can be unloaded while user-space processes are still active, and memory is freed prematurely. This can lead to a use-after-free condition and race conditions. A local...

CVE-2026-79778

A flaw was found in rclone. In the WebDAV TUS creation handler, a vulnerability allows a malicious or compromised configured endpoint to trigger a denial of service. By resetting connections during TUS uploads, an attacker can cause the application to panic, terminating processes and halting...

CVE-2026-61712

A flaw was found in BuildKit. A remote attacker could provide a malicious base image or build with oversized /etc/passwd and /etc/group files. When BuildKit attempts to resolve usernames or group identifiers from these files, it reads them without an upper bound, leading to excessive memory...

CVE-2023-36802

CVE-2023-36802 CVE-2023-36802 Cas ITW Explication Utilisation de la primitive PreviousMode pour écraser https://cwresearch.tistory.com/entry/Microsoft-Streaming-Service-Proxy-Elevation-of-Privilege-Vulnerability-CVE-2023-36802 Remerciements chompie Google Project 0...