352 matches found
blueshrimp
Proof-of-concept per CVE-2025-48593 basato sull'esame della patch. Non dovresti preoccupartene. Per quanto ne so, i telefoni NON sono vulnerabili a CVE-2025-48593. Il problema riguarda solo i dispositivi Android che supportano la funzione di cuffie/altoparlanti Bluetooth, come alcuni smartwatch,...
CVE-2017-13253
CVE-2017-13253 كود PoC لثغرة CVE-2017-13253. الشرح الكامل متاح هنا. لاحظ أن الأرقام مختلفة قليلاً عن مقال المدونة، حيث وجدت أن هناك فرصة أكبر لحدوث انهيار crash مع كومة بحجم 0x2000 بالطبع إذا قمت بتشغيله مرات كافية فسوف ينهار على أي حال. لأي أسئلة/مشاكل/تعليقات، يمكنك التواصل معي على تويتر...
CVE-2026-29781
Eine architektonische Schwachstelle im Sliver-C2-Server ermöglicht eine Reverse-C2-Waffenisierung. Durch das Extrahieren von Anmeldedaten aus einem erbeuteten Implant kann ein Verteidiger die C2-Beziehung ausnutzen, um einen Remote-Infrastruktur-Kill-Switch auszulösen. Diese Ausnutzung zielt auf...
CVE-2026-77658 Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files
A stack-based buffer overflow vulnerability exists in the Dia diagram editor when processing Network Bus objects from Dia XML project files. In objects/network/bus.c, busload reads the number of bus handles from the file attribute "bushandles" using attributenumdata without validating an upper...
EUVD-2026-64528
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
CVE-2026-74591
A race condition in the Linux kernel's __filemap_add_folio() function (in mm/filemap) allows a folio to be stored at an incorrect (intermediate rounded-down) xarray index. When the split-a-conflict retry path drops the lock for memory allocation and another thread resolves the conflict meanwhile,...
CVE-2026-74591 mm/filemap: __filemap_add_folio() restore index before retrying
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a-conflict loop, xassetorder is applied repeatedly: each application modifies xas.xaindex, rounding it down according to the splitorder attempte...
Linux Distros Unpatched Vulnerability : CVE-2026-74591
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mm/filemap: filemapaddfolio restore index before retrying In filemapaddfolio's split-a- conflict loop, xassetorder is applied repeatedly: each application...
PT-2026-79596
In the Linux kernel, the following vulnerability has been resolved: mm/filemap: filemap add folio restore index before retrying In filemap add folio's split-a-conflict loop, xas set order is applied repeatedly: each application modifies xas.xa index, rounding it down according to the split order...
SUSE CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
ALPINE-CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
UBUNTU-CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
EUVD-2026-57850
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
CVE-2026-16241
CVE-2026-16241 is a PostgreSQL ECPG vulnerability describing an integer underflow that lets a database server administrator trigger a temporary denial of service on the ECPG client by sending a bytea value without the mandatory prefix. The client may overwrite a large memory region with attacker-...
CVE-2026-16241
Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with bytes outside attacker knowledge or control. This...
Vulnerability in client (CVE-2026-16241)
PostgreSQL ECPG integer underflow can crash the client Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix. The client overwrites a huge memory region with...