641526 matches found
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2022-22274_CVE-2023-0656
SonicWall NGFW CVE-2022-22274 & CVE-2023-0656 2022年3月24日、SonicWallは以下の詳細を含む勧告を公開しました。 SonicOSのHTTPリクエストを介したスタックベースのバッファオーバーフローの脆弱性により、リモートの未認証攻撃者がサービス拒否（DoS）を引き起こしたり、ファイアウォールでのコード実行に至る可能性があります。 注：この脆弱性は「Web管理」インターフェースにのみ影響し、SonicOS SSLVPNインターフェースには影響しません。 2023年3月2日、SonicWallは別の同様の勧告を公開しました。...
CVE-2018-0101-DOS-POC
CVE-2018-0101-DOS-POC DOS fuente : https://pastebin.com/YrBcG2Ln este POC no ha sido publicado por mí. úsalo bajo tu propio riesgo...
CVE-2022-21894-Payload
これはCVE-2022-21894のシンプルなペイロード例であり、攻撃者がEFIサービスを呼び出せるようにするために第二段階ペイロードをマッピングする方法を示しています。 この脆弱性の解説はこちらでご覧いただけます: https://github.com/Wack0/CVE-2022-21894. このリポジトリのコードは、上記リポジトリのPoC（pocamd6419041）を拡張したものです。...
[SECURITY] [DLA 4764-1] libdbi-perl security update
Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()
A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...
CVE-2025-27591-PoC
CVE-2025-27591 概念実証 CVE-2025-27591 は、バージョン0.9.0より前のBelowサービスに影響を与えた特権昇格の脆弱性です。問題は、/var/log/below にワールド書き込み可能なディレクトリが作成されたことに起因します。攻撃者はこのディレクトリ内でシンボリックリンクを操作し、root権限を取得する可能性があり、ローカルの非特権ユーザーにとって深刻なセキュリティ上の懸念事項となっています。 この概念実証は、教育および研究目的のみで作成されました。...
nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...
Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update
An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
USN-8678-3 openssl vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
USN-8678-3: OpenSSL vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
CVE-2026-80695
A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...
CVE-2026-80643
A flaw was found in the Linux kernel's EDAC/igen6 driver. When this driver is unloaded, a missing 'release' function for memory controller devices can lead to a system call trace. This issue indicates a system error and could potentially result in system instability or a denial of service DoS...
CVE-2026-79775
A flaw was found in rclone. The archive backend's SquashFS parser fails to validate attacker-controlled superblock and metadata values before use. An attacker who can place or modify a malicious SquashFS image in storage exposed through an rclone :archive: remote can trigger multiple...
CVE-2026-80590
A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...
CVE-2026-76763
A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...