641638 matches found
FreeRDP: FreeRDP: Denial of Service via heap out-of-bounds read
A heap out-of-bounds read vulnerability in FreeRDP allows an unauthenticated, malicious RDP server to cause a Denial of Service. By sending a specially crafted glyph fragment update, the server forces the client to read beyond its allocated memory, crashing the application...
FreeRDP: FreeRDP: Memory disclosure or denial of service via crafted RDP update orders
A flaw was found in FreeRDP. When the async-update feature is enabled, a malicious or compromised Remote Desktop Protocol RDP server can send specially crafted update orders. This can lead to an out-of-bounds read, potentially exposing sensitive information or causing the client application to...
FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests
A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...
Important: Red Hat Security Advisory: freerdp security update
An update for freerdp is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2022-22274_CVE-2023-0656
SonicWall NGFW CVE-2022-22274 और CVE-2023-0656 24 मार्च, 2022 को, SonicWall ने निम्नलिखित विवरणों के साथ एक सलाहकार जारी किया: SonicOS में HTTP अनुरोध के माध्यम से एक स्टैक-आधारित बफर ओवरफ्लो भेद्यता एक दूरस्थ अप्रमाणित हमलावर को सेवा अस्वीकार DoS उत्पन्न करने या संभावित रूप से फ़ायरवॉल में कोड...
CVE-2018-0101-DOS-POC
CVE-2018-0101-DOS-POC DOS स्रोत : https://pastebin.com/YrBcG2Ln यह POC मेरे द्वारा जारी नहीं किया गया है। अपने जोखिम पर उपयोग करें।...
CVE-2022-21894-Payload
هذا مثال بسيط على حمولة لـ CVE-2022-21894 يوضح كيف يمكن للمهاجم تعيين حمولة المرحلة الثانية ليتمكن من استدعاء خدمات EFI. يمكن الاطلاع على شرح هذه الثغرة هنا: https://github.com/Wack0/CVE-2022-21894. الكود في هذا المستودع يوسع الـ PoC pocamd6419041 من المستودع المذكور أعلاه...
[SECURITY] [DLA 4764-1] libdbi-perl security update
Debian LTS Advisory DLA-4764-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 31, 2026 https://wiki.debian.org/LTS Package : libdbi-perl Version : 1.643-3+deb11u2 1.643-4+deb12u2 CVE ID : CVE-2026-14380 CVE-2026-14739 CVE-2026-14740 CVE-2026-15043...
kernel: Bluetooth: SCO: fix race conditions in sco_sock_connect()
A flaw was found in the Linux kernel, specifically within its Bluetooth Synchronous Connection-Oriented SCO component. This vulnerability occurs due to race conditions when multiple connection attempts are made simultaneously on the same Bluetooth socket. This can lead to a use-after-free error,...
CVE-2025-27591-PoC
CVE-2025-27591 प्रमाण-अवधारणा CVE-2025-27591 एक विशेषाधिकार वृद्धि कमजोरी है जो संस्करण 0.9.0 से पहले Below सेवा को प्रभावित करती है। यह समस्या /var/log/below पर एक विश्व-लेखन योग्य निर्देशिका बनाने के कारण उत्पन्न हुई। एक हमलावर इस निर्देशिका के भीतर सिमलिंक्स में हेरफेर करके इस कमजोरी का शोषण क...
nodejs: Node.js: Heap-use-after-free in HTTP/2 handling can lead to denial of service
A heap use-after-free vulnerability in the Node.js HTTP/2 component allows a remote attacker to crash the application, causing a denial of service. This is triggered by an unexpected re-entrant call to nghttp2sessionmemsend while nghttp2sessionmemrecv is still executing...
Important: Red Hat Security Advisory: nodejs24 security, bug fix, and enhancement update
An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
USN-8678-3 openssl vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
USN-8678-3: OpenSSL vulnerability
USN-8673-1 fixed vulnerabilities in OpenSSL. The update inadvertently left out the fix for CVE-2026-75803 in Ubuntu 26.04 LTS. This update fixes the problem. We apologize for the inconvenience. Original advisory details: It was discovered that OpenSSL incorrectly handled the QUIC server incoming...
CVE-2026-80695
A flaw was found in the Linux kernel's hwmon hardware monitoring subsystem, specifically in the sht3x driver. This vulnerability occurs due to unaligned memory accesses when the driver processes 16-bit temperature and humidity values. A local attacker or a malicious device interacting with the...
CVE-2026-80643
A flaw was found in the Linux kernel's EDAC/igen6 driver. When this driver is unloaded, a missing 'release' function for memory controller devices can lead to a system call trace. This issue indicates a system error and could potentially result in system instability or a denial of service DoS...
CVE-2026-79775
A flaw was found in rclone. The archive backend's SquashFS parser fails to validate attacker-controlled superblock and metadata values before use. An attacker who can place or modify a malicious SquashFS image in storage exposed through an rclone :archive: remote can trigger multiple...
CVE-2026-80590
A flaw was found in the Linux kernel's network fragment reassembly process. An unprivileged local user, or a guest in a virtualized environment, could craft specially formed IPv4 or IPv6 network fragments that incorrectly retain Generic Segmentation Offload GSO state after reassembly. This...
CVE-2026-76763
A flaw was found in SmallRye GraphQL. The number scalar coercion for BigInteger does not properly validate the magnitude of float or string inputs. An unauthenticated remote attacker can exploit this by sending a GraphQL query containing a large exponent float literal. This can lead to the...