CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-21045_and_CVE-2026-21048

CVE-2026-21045 & CVE-2026-21048 — Samsung libimagecodec.quram.so OOB書き込みPoC 概要 このリポジトリには、Samsung Androidデバイスで使用されるQuramsoftイメージコーデックライブラリ libimagecodec.quram.so における境界外 OOB 書き込みの脆弱性を示す概念的なProof-of-Concept PoC ファイルが含まれています。 CVE| 形式| タイプ| 重大度| CVSS 4.0| パッチ適用リリース ---|---|---|---|---|---...

EUVD-2026-77248

Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP...

CVE-2026-82765

CVE-2026-82765 is a path traversal vulnerability in Contec FX5000, FX4000, and FX3000 series devices. An attacker with FTP access to the affected product can view and/or alter arbitrary files on the server, resulting in high confidentiality and integrity impact with no availability impact. The CN...

CVE-2026-82782

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82782

An out-of-bounds write vulnerability in CONPROSYS nano Series (Contec) allows a remote attacker with low privileges to send a specially crafted request that triggers a denial-of-service condition. The CVSS 3.1 score is 4.3 (MEDIUM) and CVSS 4.0 is 5.3 (MEDIUM) , reflecting a network-based attack ...

EUVD-2026-77235

Out-of-bounds write vulnerability exists in CONPROSYS nano Series. Receiving a specially crafted request created and sent by a remote attacker may cause a denial-of-service DoS condition...

CVE-2026-82768

A path traversal vulnerability in SGA1000 (manufactured by Contec ) allows an attacker with FTP access to view and/or alter arbitrary files on the server, potentially leading to high confidentiality and integrity compromise with no availability impact . The vulnerability is scored CVSS 3.1: 8.1 (...

CVE-2025-63602

CVE-2025-63602 CVE-2025-63602에 대한 공개 사항으로, Awesome Miner 11.2.4에서 안전하지 않은 드라이버를 사용하여 MSR에 대한 임의 커널 읽기/쓰기를 유발하고, 최종적으로 커널 코드 실행으로 이어지는 PoC를 포함합니다...

CVE-2026-36227

CVE-2026-36227: Easy Chat Server 3.1 UserName パストラバーサル PoC このリポジトリは、Easy Chat Server 3.1 のユーザー登録処理におけるパストラバーサル問題である CVE-2026-36227 に対する良性の PoC（Proof of Concept）を含んでいます。 このリポジトリは、許可されたセキュリティ研究とローカルでの再現のみを目的としています。所有していない、または明示的なテスト許可を得ていないシステムに対して使用しないでください。 概要 Easy Chat Server 3.1 は POST...

CVE-2026-43284

Dirty Frag: 유니버설 리눅스 LPE 개요 이 문서는 Hyunwoo Kim @v4bel이 발견하고 보고한 Dirty Frag 취약점 클래스에 대해 설명합니다. xfrm-ESP Page-Cache Write CVE-2026-43284와 RxRPC Page-Cache Write CVE-2026-43500을 체이닝하여 공격자는 주요 리눅스 배포판에서 루트로 권한을 상승시킬 수 있습니다. Dirty Frag는 Dirty Pipe 및 Copy Fail과 동일한 버그 계열에 속합니다. 이는 타이밍 윈도우나 경쟁 조건에 의존하지 않...

CVE-2026-6815

CVE-2026-6815 PoC/Exploit：Casdoor 3.54.1 路径遍历与任意文件写入（已认证） 本仓库包含针对 CVE-2026-6815 的概念验证（PoC）利用代码，该漏洞是 Casdoor 中的一个任意文件写入与路径遍历漏洞。 该漏洞已在 3.54.1 版本中被 修复。 前提条件 攻击者必须通过管理员权限或同等权限的用户账户认证到 Casdoor 实例，且该账户具有创建和/或编辑存储提供商的权限。 影响 远程代码执行（RCE） ：通过写入敏感位置，如 .ssh/authorizedkeys、crontab 或 Web 根目录。 拒绝服务（DoS）...

CVE-2023-22632

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor...

CVE-2023-22631

PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor...

Important: Red Hat Security Advisory: gstreamer1-plugins-bad-free security update

An update for gstreamer1-plugins-bad-free is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common...

gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec IMA/DVI ADPCM decoder

A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio. Insufficient validation of the per-block sample count for multi-channel streams allows a crafted WAV file to cause writes beyond the allocated output buffer. Thi...

CVE-2026-33960

An issue was discovered in Samsung Mobile Processor and Wearable Processor Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000. . A malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of...

CVE-2026-33956

An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, and 2500. Sending a malformed message to the testmsg sysfs entry causes an out-of-bounds write, leading to denial of service...

CVE-2026-23791

An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 1380, 1480, 2400, 1580, 2500, 1680, and 2600. An out-of-bounds write vulnerability in the Exynos DPU driver due to missing input length validation in color mode LUT parsing leads to kernel memory corruption and potentia...