641570 matches found
FreeRDP: FreeRDP: Denial of Service due to RDPEI message processing
A flaw was found in FreeRDP. A remote attacker can exploit a vulnerability in the Remote Desktop Protocol RDP Enhanced Input RDPEI server channel handler. By sending a malicious RDPEI message with an oversized declared body length, the attacker can force the server to allocate excessive memory,...
FreeRDP: FreeRDP: Out-of-bounds read leads to denial of service and information disclosure
A flaw was found in FreeRDP, an implementation of the Remote Desktop Protocol. A malicious RDP server can exploit an out-of-bounds read vulnerability by sending a malformed planar bitmap or surface update. This causes the client's decoder to read beyond its allocated buffer, which can lead to a...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via integer underflow in RAIL channel handling
A flaw was found in FreeRDP. A remote attacker, by sending a specially crafted Remote Desktop Protocol RDP packet, could trigger a heap buffer overflow in the server-side RAIL channel handler. This vulnerability, caused by an integer underflow, allows the attacker to corrupt memory and crash the...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
FreeRDP: FreeRDP: Out-of-bounds memory access in Kerberos decryption
A flaw in FreeRDP's Kerberos implementation allows a malicious RDP peer to cause an out-of-bounds memory access by providing an unbounded GSS Wrap-token EC field. This occurs during CredSSP/NLA decryption and can lead to a denial of service or information disclosure...
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2022-22274_CVE-2023-0656
SonicWall NGFW CVE-2022-22274 및 CVE-2023-0656 2022년 3월 24일, SonicWall은 다음과 같은 세부 정보가 포함된 권고를 발표했습니다: SonicOS의 HTTP 요청을 통한 스택 기반 버퍼 오버플로우 취약점으로 인해 원격 인증되지 않은 공격자가 서비스 거부DoS를 일으키거나 방화벽에서 코드 실행을 초래할 수 있습니다. 참고: 이 취약점은 "웹 관리" 인터페이스에만 영향을 미치며, SonicOS SSLVPN 인터페이스는 영향을 받지 않습니다. 2023년 3월 2일, SonicWall은...
CVE-2018-0101-DOS-POC
CVE-2018-0101-DOS-POC DOS источник : https://pastebin.com/YrBcG2Ln этот POC не был опубликован мной. используйте на свой страх и риск...
CVE-2022-21894-Payload
이것은 CVE-2022-21894에 대한 간단한 예제 페이로드로, 공격자가 EFI 서비스를 호출할 수 있도록 두 번째 단계 페이로드를 매핑하는 방법을 보여줍니다. 이 취약점에 대한 분석은 여기에서 볼 수 있습니다: https://github.com/Wack0/CVE-2022-21894. 이 저장소의 코드는 위에서 언급한 저장소의 PoCpocamd6419041를 확장합니다...
[SECURITY] [DLA 4764-1] libdbi-perl security update
Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()
A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...
CVE-2025-27591-PoC
CVE-2025-27591 개념 증명 CVE-2025-27591은 0.9.0 이전 버전의 Below 서비스에 영향을 미친 권한 상승 취약점입니다. 문제는 /var/log/below에 전역 쓰기 가능 디렉터리가 생성된 데서 발생했습니다. 공격자는 이 디렉터리 내의 심볼릭 링크를 조작하여 이 취약점을 악용하고 잠재적으로 루트 권한을 획득할 수 있으며, 이는 로컬 비특권 사용자에게 심각한 보안 문제가 됩니다. 이 개념 증명은 교육 및 연구 목적으로만 작성되었습니다. 이 글을 작성하는 시점에 이 취약점에 대한 공개적으로 이용 가능한...
nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...
Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update
An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
USN-8678-3 openssl vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
USN-8678-3: OpenSSL vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...