PT-2026-104679

Name of the Vulnerable Software and Affected Versions MediaTek Modem affected versions not specified Description A missing bounds check in the modem allows for an out-of-bounds write. This issue can be exploited if a User Equipment UE connects to a rogue base station controlled by an attacker,...

PT-2026-104750

The system-call verifier for i3c do ccc in drivers/i3c/i3c handlers.c validated the outer struct i3c ccc payload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3c ccc target payload carrie...

CVE-2026-49878: Out-of-bounds Write

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-104704

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS110495...

CVE-2026-20544: Out-of-bounds Write

In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS110495...

PT-2026-104680

Name of the Vulnerable Software and Affected Versions MediaTek MT2716 affected versions not specified Description A missing bounds check in the Modem component allows an out-of-bounds write. This issue can be exploited by a remote attacker who controls a rogue base station to achieve escalation o...

MiracleLinux 8 : gdb-8.2-20.1.el8_10 (AXSA:2026-1966:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1966:03 advisory. gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

AlmaLinux 10 : kernel (ALSA-2026:70498)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70498 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry...

RHEL 9 : gimp (RHSA-2026:75575)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:75575 advisory. The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox,...

RHEL 8 : libpcap (RHSA-2026:76045)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:76045 advisory. The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection,...

CVE-2026-20586: Out-of-bounds Write

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11383899; Issue ID: MSV-9614...

CVE-2026-59783: Out-of-bounds Write

The Zabbix Server/Proxy has a vulnerability where binary items can crash the Server/Proxy on certain NULL byte input leading to potential loss of availability. This only affects deployments where MySQL/MariaDB database is used as the Zabbix database...

CVE-2026-55200

CVE-2026-55200 - Vulnérabilité critique d'exécution de code à distance dans libssh2 Vulnérabilité critique de corruption mémoire avant authentification dans libssh2 Aperçu Champ| Détail ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Critique Type| Écriture hors limites Composant| libssh2 Versions affectée...

CVE-2026-42536-PoC

CVE-2026-42536 : Débordement de tas dans modxml2enc du serveur HTTP Apache — PoC Ce code PoC fait partie de l'article de blog disponible à l'adresse https://erberkan.github.io/2026/PatchDiffingandN-DayDefense/ . Ce dépôt contient une preuve de concept contrôlée pour CVE-2026-42536, une écriture...

CVE-2017-0037

CVE-2017-0037 ثغرة تلف الذاكرة في متصفح مايكروسوفت تتحدث هذه الوثيقة عن CVE-2017-0037 - ثغرة تلف الذاكرة في متصفح مايكروسوفت. ستقدم أولاً ما هو تنفيذ التعليمات البرمجية عن بُعد RCE ثم ستستعرض بعض التفاصيل التقنية. ما هو تنفيذ التعليمات البرمجية عن بُعد؟ هجوم إلكتروني يمكن للمهاجم من خلاله تنفيذ...

CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — Reproducteur d'écriture hors limites dans alsa-lib Reproducteur C autonome pour CVE-2026-90781 , une écriture hors limites d'1 octet dans sndctlasciielemidparse d'alsa-lib lors de l'analyse de name= formes entre guillemets et sans guillemets. Vulnérabilité Dans...

CVE-2022-0995

CVE-2022-0995 استغلال لـ CVE-2022-0995. يستخدم كتابة خارج حدود الكومة في مكون watchqueue لنواة لينكس. تقنية مماثلة موصوفة في هذا البحث https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. تم اختبار الاستغلال على Ubuntu 21.10 نواة 5.13.0-37. لا ينجح الاستغلال دائمًا، ...

cve-2021-4034

CVE-2021-4034 - PwnKit تصعيد الصلاحيات المحلية في Polkit نظرة عامة يحتوي هذا المستودع على إثبات المفهوم لثغرة CVE-2021-4034 ، المعروفة أيضًا باسم PwnKit. تم تطويره لأغراض التدريب الشخصي والتعليم فقط. استخدمه فقط في بيئات تمتلكها أو مصرح لك صراحةً باختبارها. المتطلبات لبناء الاستغلال تحتاج إلى: gc...

CVE-2026-17544

CVE-2026-17544 — Écriture hors limites OOB dans PHP bcmath → RCE universelle en mémoire uniquement Un proof-of-concept armé pour CVE-2026-17544 , une écriture hors limites dans l'extension bcmath réécrite de PHP bcstr2num. Il transforme le crash public connu DoS uniquement en une primitive...