libvmdk

libvmdk 是一个用于访问 VMware 虚拟磁盘（VMDK）格式的库。 项目信息： 状态：alpha 许可证：LGPL-3.0-or-later 支持读取的 extent 文件格式： RAW（flat） COWD 版本 1（稀疏） VMDK 版本 1、2 和 3（稀疏） 支持的 VMDK 格式功能： 增量链接 粒度压缩（自版本 20131209 起） 数据标记（自版本 20140416 起） 目前尚不支持的 VMDK 格式功能： 使用物理设备的映像 更改块跟踪（CBT）（由 VMDK 版本 3（稀疏）支持）/ 更改跟踪文件 正在进行的工作： Dokan 库支持 handle API...

EDRaser

EDRaser Guía de uso EDRaser es una herramienta poderosa para eliminar de forma remota registros de acceso, registros de eventos de Windows, bases de datos y otros archivos en máquinas remotas. Ofrece dos modos de operación: automatizado y manual. Modo Automatizado En el modo automatizado, EDRaser...

CVE-2020-14293

CVE-2020-14293 此漏洞由我发现并披露。本仓库将包含安全公告、受影响软件及漏洞利用代码。 本仓库仅用于教育目的。 链接 公告 SYSS-2020-025 详细分析 SySS 博客文章 Exploit-DB 上的漏洞利用 厂商通知 MITRE 条目 NVD 条目 软件 你可以在发布页面找到该软件。它是一个在 VirtualBox 中对我可用的 vmdk 文件。详细说明见这里：发布页面...

google-poc

Para reproducir el CVE-2025-13425 solo sigue los pasos a continuación: Paso 1: Clona el código fuente fresco de osv-scalibr: root@kitploit: $ git clone https://github.com/google/osv-scalibr Paso 2: Elimina el código mencionado en el commit de la corrección...

The vulnerability in the block/vmdk.c component of the QEMU hardware emulation software allows a hacker to cause a system failure.

The vulnerability of the block/vmdk.c component of the QEMU hardware emulation software is related to reading data from beyond the allowable buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created VMDK image...

PYSEC-2026-2411 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

PYSEC-2026-2490 OpenStack Cinder, glance, and Nova vulnerable to Path Traversal

An issue was discovered in OpenStack Cinder before 19.1.2, 20.x before 20.0.2, and 21.0.0; Glance before 23.0.1, 24.x before 24.1.1, and 25.0.0; and Nova before 24.1.2, 25.x before 25.0.2, and 26.0.0. By supplying a specially created VMDK flat image that references a specific backing file path, a...

Security update for qemu

This update for qemu fixes the following issues: CVE-2023-1544: pvrdma: out-of-bounds read in pvrdmaringnextelemread bsc1209554. CVE-2025-11234: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service bsc1250984. CVE-2026-2243: incorrect bounds check leads to heap...

SUSE-SU-2026:2406-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2023-1544: pvrdma: out-of-bounds read in pvrdmaringnextelemread bsc1209554. - CVE-2025-11234: qemu-kvm: use-after-free in websocket handshake code can lead to denial of service bsc1250984. - CVE-2026-2243: incorrect bounds check leads to heap...

SUSE SLES15 Security Update : qemu (SUSE-SU-2026:2388-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2388-1 advisory. Security fixes: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when...

SUSE-SU-2026:2388-1 Security update for qemu

This update for qemu fixes the following issues: Security fixes: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files bsc1258509. - CVE-2026-3842: hyperv/syndbg: missing mapped-length guard after...

Security update for qemu

This update for qemu fixes the following issues: CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto bsc1255400. CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption bsc1256484. CVE-2026-2243: incorrect bounds check leads to heap...

SUSE-SU-2026:2385-1 Security update for qemu

This update for qemu fixes the following issues: - CVE-2026-2243: incorrect bounds check leads to heap out-of-bounds read and a 12-byte information leak when processing specially crafted VMDK files bsc1258509. - CVE-2026-3195: heap buffer overflow when reading input audio in the virtio-snd device...

EulerOS Virtualization 2.13.1 : qemu (EulerOS-SA-2026-2156)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a...

EulerOS Virtualization 2.13.0 : qemu (EulerOS-SA-2026-2195)

According to the versions of the qemu packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a...

SUSE-SU-2026:21883-1 Security update for qemu

This update for qemu fixes the following issues - CVE-2025-14876: qemu-kvm: Unbounded allocation in virtio-crypto bsc1255400. - CVE-2026-0665: out-of-bounds heap access can lead to a denial of service or potential memory corruption bsc1256484. - CVE-2026-2243: incorrect bounds check leads to heap...

OESA-2026-2092 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of...

OESA-2026-2091 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of...

OESA-2026-2093 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in QEMU. A specially crafted VMDK image could trigger an out-of-bounds read vulnerability, potentially leading to a 12-byte leak of sensitive information or a denial of...

openSUSE 16 Security Update : qemu (openSUSE-SU-2026:20567-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20567-1 advisory. Update to version 10.0.9. Security issues fixed: - CVE-2026-3196: unbounded memory allocation and host denial-of-service via PCMINFO requests se...