CVE-2026-20530: Out-of-bounds Write

In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS11292777; Issue ID: MSV-9195...

AlmaLinux 10 : kernel (ALSA-2026:70498)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:70498 advisory. kernel: crypto: afalg - Disallow concurrent writes in afalgsendmsg CVE-2025-39964 kernel: iommu/vt-d: Clear Present bit before tearing down PASID entry...

PT-2026-104682

Name of the Vulnerable Software and Affected Versions neuropilot affected versions not specified Description A missing bounds check in neuropilot allows for an out of bounds write, which is a condition where data is written outside the intended memory boundary. This flaw could enable local...

PT-2026-104679

Name of the Vulnerable Software and Affected Versions MediaTek Modem affected versions not specified Description A missing bounds check in the modem allows for an out-of-bounds write. This issue can be exploited if a User Equipment UE connects to a rogue base station controlled by an attacker,...

PT-2026-104750

The system-call verifier for i3c do ccc in drivers/i3c/i3c handlers.c validated the outer struct i3c ccc payload, the broadcast ccc.data buffer and the targets.payloads array, but did not validate the per-target data buffers those array elements point at. Each struct i3c ccc target payload carrie...

PT-2026-106157

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description An incorrect bounds check in multiple locations allows for a possible out of bounds write, which is a condition where data is written outside the intended memory...

CVE-2026-49878: Out-of-bounds Write

In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation...

MiracleLinux 8 : gdb-8.2-20.1.el8_10 (AXSA:2026-1966:03)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1966:03 advisory. gdb: STABS debug format parser out-of-bounds write via crafted ELF binary CVE-2026-13732 Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : libpcap-1.10.0-4.el9_8.1 (AXSA:2026-1962:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1962:01 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description blo...

Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...

ALSA-2026:75575 Important: gimp security update

The GIMP GNU Image Manipulation Program is an image composition and editing program. GIMP provides a large image manipulation toolbox, including channel operations and layers, effects, sub-pixel imaging and anti-aliasing, and conversions, all with multi-level undo. Security Fixes: gimp: gimp:...

ALSA-2026:76045 Important: libpcap security update

The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fixes: libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access...

CVE-2026-55200

CVE-2026-55200 - Критическая уязвимость удаленного выполнения кода в libssh2 Критическая уязвимость повреждения памяти до аутентификации в libssh2 Обзор Поле| Описание ---|--- CVE| CVE-2026-55200 CVSS| 9.2 Критический Тип| Запись за границами буфера Компонент| libssh2 Затронутые версии| = 1.11.1...

CVE-2026-42536-PoC

CVE-2026-42536: Apache HTTP Server modxml2enc ヒープオーバーフロー PoC この PoC コードは https://erberkan.github.io/2026/PatchDiffingandN-DayDefense/ のブログ記事の一部です。 このリポジトリには、Apache HTTP Server の modxml2enc モジュールにおけるヒープベースの境界外書き込みである CVE-2026-42536 の制御された概念実証が含まれています。Apache HTTP Server のバージョン 2.4.0 から 2.4.67...

CVE-2017-0037

CVE-2017-0037 Уязвимость повреждения памяти браузера Microsoft Этот документ посвящен CVE-2017-0037 — уязвимости повреждения памяти браузера Microsoft. Сначала будет рассказано, что такое удаленное выполнение кода RCE , а затем рассмотрены некоторые технические детали. Что такое удаленное...

CVE-2026-90781-alsa-lib-oob

CVE-2026-90781 — alsa-lib 越界写入复现程序 针对 CVE-2026-90781 的独立 C 语言复现程序，该漏洞是 alsa-lib 的 sndctlasciielemidparse 在解析 name=（带引号和不带引号两种形式）时发生的 1 字节越界写入。 漏洞详情 在 src/control/ctlparse.c（v1.2.16.1 及更早的开发版 HEAD）中： char buf64; ... if size intsizeofbuf // BUG: allows size == 64 ptr++ = str; size++; ... ptr = '\0'...

CVE-2022-0995

CVE-2022-0995 Эксплойт для CVE-2022-0995. Использует запись за пределы кучи в компоненте watchqueue ядра Linux. Похожая техника описана в данном исследовании https://google.github.io/security-research/pocs/linux/cve-2021-22555/writeup.html. Эксплойт проверен на Ubuntu 21.10 ядро 5.13.0-37. Экспло...

cve-2021-4034

CVE-2021-4034 - PwnKit Локальное повышение привилегий Polkit Обзор Этот репозиторий содержит доказательство концепции для CVE-2021-4034 , также известного как PwnKit. Он разработан только для личного обучения и образовательных целей. Используйте только в средах, которыми вы владеете или на...

CVE-2026-17544

CVE-2026-17544 — PHP bcmath OOB 쓰기 → 범용 메모리 전용 RCE CVE-2026-17544 에 대한 무기화된 개념 증명PoC으로, PHP의 재작성된 bcmath 확장bcstr2num에서 발생하는 out-of-bounds 쓰기 취약점입니다. 이는 공개적으로 알려진 DoS 전용 크래시를 완전하고 보편적이며 메모리 전용인 원격 코드 실행 프리미티브 로 변환하며, 동시에 disablefunctions 및 openbasedir을 모두 우회합니다. 승인된 연구 / 교육용으로만 사용하십시오. 자신이 소유했거나...