640639 matches found
FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling
A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...
FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2022-22274_CVE-2023-0656
SonicWall NGFW CVE-2022-22274 و CVE-2023-0656 في 24 مارس 2022، أصدرت SonicWall إشعارًا بالتفاصيل التالية: ثغرة أمان من نوع تجاوز سعة المخزن المؤقت Stack-based buffer overflow في SonicOS عبر طلب HTTP تسمح لمهاجم خارجي غير موثوق بالتسبب في رفض الخدمة DoS أو ربما تؤدي إلى تنفيذ الأكواد في جدار...
CVE-2018-0101-DOS-POC
CVE-2018-0101-DOS-POC DOS المصدر : https://pastebin.com/YrBcG2Ln هذا الـ POC لم يتم إصداره بواسطتي. استخدمه على مسؤوليتك الخاصة...
CVE-2022-21894-Payload
هذا مثال بسيط على حمولة لـ CVE-2022-21894 يوضح كيف يمكن للمهاجم تعيين حمولة المرحلة الثانية ليتمكن من استدعاء خدمات EFI. يمكن الاطلاع على شرح هذه الثغرة هنا: https://github.com/Wack0/CVE-2022-21894. الكود في هذا المستودع يوسع الـ PoC pocamd6419041 من المستودع المذكور أعلاه...
[SECURITY] [DLA 4764-1] libdbi-perl security update
Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()
A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...
CVE-2025-27591-PoC
CVE-2025-27591 إثبات المفهوم CVE-2025-27591 هي ثغرة تصعيد صلاحيات أثرت على خدمة Below قبل الإصدار 0.9.0. نشأت المشكلة بسبب إنشاء مجلد قابل للكتابة عالميًا في /var/log/below. يمكن للمهاجم استغلال هذه الثغرة من خلال التلاعب بالروابط الرمزية داخل هذا المجلد وربما الحصول على صلاحيات الجذر، مما يجعلها...
nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...
Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update
An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
USN-8678-3 openssl vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
USN-8678-3: OpenSSL vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
CVE-2026-80695
A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...
CVE-2026-80643
A flaw was found in the Linux kernel's EDAC/igen6 driver. When this driver is unloaded, a missing 'release' function for memory controller devices can lead to a system call trace. This issue indicates a system error and could potentially result in system instability or a denial of service DoS...
CVE-2026-79775
A flaw was found in rclone. The archive backend's SquashFS parser fails to validate attacker-controlled superblock and metadata values before use. An attacker who can place or modify a malicious SquashFS image in storage exposed through an rclone :archive: remote can trigger multiple...
CVE-2026-80590
A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...