CVE-2026-106112 ImageSharp: ICC LUT16 output channel count can write beyond Vector4

ImageSharp is a 2D graphics library. From 4.0.0 until 4.1.2, ICC LUT16 conversion accepts more than four output channels even though ClutCalculator.Calculate and LutEntryCalculator.CalculateLut store intermediate and output values in Vector4. When DecoderOptions.ColorProfileHandling is set to...

CVE-2026-80898

A flaw was found in the netfs component of the Linux kernel. When a copy-to-cache append operation fails, the PGprivate2 state and its associated reference are not properly released. This oversight can lead to a resource leak, potentially causing system instability or a denial of service DoS...

CVE-2026-80727

A flaw was found in the Linux kernel's x86 Machine Check Exception MCE handling. During the discovery of Corrected Machine Check Interrupts CMCI, a timer used for storm detection is modified before it is properly initialized. This improper timer setup can lead to kernel warnings and system...

sockstress

sockstress Go를 사용한 Sockstress CVE-2008-4609 구현 설치 go get github.com/marcelki/sockstress 사용법 Usage: sockstress options... Options: -p The destination port to attack. -i The network interface to use. -d The delay between SYN packets You can choose your unit of time e.g. 1ns, 0.001s -h Display this...

CVE-2026-89894

A flaw was found in the Linux kernel's cx231xx media driver. A local attacker can exploit this vulnerability by manipulating video and Vertical Blanking Interval VBI queue operations. This allows for a heap out-of-bounds write, which could lead to arbitrary code execution or a denial of service...

CVE-2026-89777

A flaw was found in the Linux kernel's vfio/pci component. During device initialization, a memory pointer is not properly cleared after being freed, leading to a use-after-free and double-free vulnerability. A local attacker could exploit this flaw to cause a system crash, resulting in a denial o...

CVE-2026-90111

A flaw was found in the Linux kernel's IPv6 multicast routing ip6mr component. This use-after-free vulnerability occurs when a non-refcounted destination entry is improperly handled after being freed. A remote attacker could potentially exploit this by sending specially crafted IPv6 multicast...

sap_igs_xxe

SAP IGS XXE 공격 CVE-2018-2392 및 CVE-2018-2393 Metasploit Framework의 이 모듈 문서 모듈 취약한 애플리케이션 이 모듈은 SAP Internet Graphics ServersIGS 버전 7.20, 7.20EXT, 7.45, 7.49 또는 7.53을 실행하는 XMLCHART 페이지 내의 두 가지 XXE 취약점인 CVE-2018-2392 및 CVE-2018-2393을 악용합니다. 이러한 취약점은 새 차트를 생성하기 위해 XMLCHART 페이지에 POST 요청을 제출할 때...

CVE-2026-90036

A flaw was found in the Linux kernel's Network File System Daemon NFSD. A use-after-free vulnerability can occur during the blocked-lock reaping process. This happens when a client's lock owner, without a proper reference to keep the client alive, leads to the client being prematurely freed. This...

CVE-2026-90008

A flaw was found in the Linux kernel's megaraidsas component. The megasasmakeprpnvme function, which constructs a list of memory pages for data transfers, fails to verify the allocated buffer's boundaries. This can result in a buffer overrun, potentially leading to a system crash Denial of Servic...

CVE-2024-35333

CVE-2024-35333 Уязвимость переполнения буфера стека существует в функциональности обработки кодировок символов в html2xhtml версии 1.3. Злоумышленник может использовать эту уязвимость, предоставив специально созданные входные данные, что приведет к переполнению переменной 'buf', расположенной на...

CVE-2021-23017

CVE-2021-23017 PoC Scanner NGINX DNS 오버플로우 취약점 확인 - CVE-2021-23017 PoC 이 Python 스크립트는 nginx 서버가 nginx에 내장된 DNS 리졸버 에 영향을 미치고 버퍼 오버플로우를 유발할 수 있는 치명적인 취약점 CVE-2021-23017 에 잠재적으로 취약한지 확인합니다. 🔍 하는 일 사용자에게 URL을 요청합니다. 매우 긴 악성 Host 헤더와 함께 HTTP 요청을 전송합니다. 서버에 nginx의 resolver가 구성되어 있고 취약한 경우, 서버가 실패하거나 로...

CVE-2021-40906

CVE-2021-40906 - Отраженный XSS в неаутентифицированной зоне Приложение: CheckMK Management Web Console Версия ПО: С 1.5.0 по 1.5.0p25 Автор: Edgar Augusto Loyola Torres. Тип атаки: Отраженный XSS Решение: Обновите до версии ПО 1.6.0p26 или новее Краткое описание: Программное обеспечение CheckMK...

WordPress-Long-Password-Denial-of-Service

Отказ в обслуживании WordPress CVE-2014-9016 Отказ от ответственности Содержимое этого скрипта предназначено только для использования в этических целях. Не используйте этот скрипт, если у вас нет письменного разрешения от владельца оборудования. Если вы совершаете незаконные действия, вы, вероятн...

dovecot: Dovecot: Denial of service via crafted email headers

A flaw was found in dovecot. A remote attacker can craft a malicious email with an excessive number of email addresses or MIME parameters in its headers. When a user attempts to read this message over IMAP, the parsing process consumes an inordinate amount of memory, leading to the termination of...

Important: Red Hat Security Advisory: dovecot security, bug fix, and enhancement update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

dovecot: Dovecot: Denial of Service via truncated quoted argument in ManageSieve

A flaw was found in Dovecot's ManageSieve login process. An unauthenticated attacker can exploit this vulnerability by sending a specially crafted, truncated quoted argument. This action causes the process to enter an infinite loop, consuming excessive CPU resources. Repeated exploitation can lea...

dovecot: Dovecot: Denial of Service via IMAP ID command with excessive parameters

A flaw was found in Dovecot. An unauthenticated attacker can send an IMAP ID command with a very large number of parameters before logging in. This action causes the server to consume excessive memory and CPU resources, leading to the termination of login processes and other active connections...

dovecot: Dovecot: Denial of Service in ManageSieve login process

A flaw was found in Dovecot. An unauthenticated attacker can crash the ManageSieve login process by sending a small malformed command before authenticating. This can lead to a denial of service for Sieve script management, affecting either the attacker's connection or all connections handled by t...

CVE-2026-105866

Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an unauthenticated attacker who knows an account email address or username can abuse the account lockout mechanism of a local-authentication collection to...