52038 matches found
CVE-2026-28609-matroska-pcm-oob
CVE-2026-28609 — Matroska PCM Out-of-Bounds Write Proof-of-concept, instrumented reproduction harness, and technical write-up for CVE-2026-28609, an out-of-bounds write in Android's MatroskaExtractor reachable via a crafted WebM file with a big-endian PCM audio track. At a glance CVE ID:...
CVE-2024-12084
CVE-2024-12084 rsync 데몬에서 힙 기반 버퍼 오버플로우 취약점이 발견되었습니다. 이 문제는 코드에서 공격자가 제어하는 체크섬 길이s2length를 부적절하게 처리하기 때문에 발생합니다. MAXDIGESTLEN이 고정된 SUMLENGTH16바이트를 초과하면 공격자는 sum2 버퍼에서 경계를 벗어난 쓰기를 수행할 수 있습니다. 이 탐지 방법은 어떻게 작동하나요? 이 템플릿은 CVE-2024-12084에 취약할 가능성이 높은 rsync 프로토콜 버전 31과 일치합니다. rsync의 프로토콜을 버전에 매핑하여 이를 확...
CVE-2025-14174-analysis
CVE-2025-14174 분석: ANGLE Metal Staging Buffer Out-of-Bounds Write CVE-2025-14174에 대한 기술 분석 및 개념 증명 | ---|--- CVE| CVE-2025-14174 심각도| 높음 실제 공격에 사용됨| 예 - iOS 26 미만 대상 공격 영향을 받는 대상| iOS Safari, macOS Chrome/Chromium/Electron macOS Safari 제외 상태| ANGLE 커밋 95a32cb에서 패치됨 크레딧| Apple, Google Threat...
CVE-2025-32023
CVE-2025-32023 CVE-2025-32023에 대한 PoC 및 Exploit GHSA-rp2m-q4j6-gr43 / PlaidCTF 2025 "Zerodeo" 재현 / 패치 redis:7.4.2-alpine3.21@sha256:02419de7eddf55aa5bcf49efb74e88fa8d931b4d77c07eff8a6b2144472b6952에 대해 테스트했습니다. Redis 2.8 이상 버전에 영향을 미칩니다. 8.0.3, 7.4.5, 7.2.10, 6.2.19에서 패치되었습니다. redis/redis@5018874...
cve-2024-25423
cve-2024-25423 Проблема в MAXON CINEMA 4D R2024.2.0 позволяет локальному злоумышленнику выполнить произвольный код с помощью специально созданного файла c4d. Дополнительная информация Уязвимость выхода за границы записи в Cinema 4D при разборе файлов c4d Затронутый компонент c4dbase.xdl64...
CVE-2026-74469
⚡ CVE-2026-74469 — DiagSpill Linux Kernel SCTP Peer Transport Count Overflow A Linux kernel SCTP vulnerability caused by a 16-bit peer transport counter overflow , allowing the counter to wrap from 65535 to 0. During an SCTP diagnostic dump, the wrapped value can cause insufficient skb payload...
[SECURITY] [DLA 4816-1] pcre2 security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4816-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso October 03, 2026 https://wiki.debian.org/LTS -...
external_curl_AOSP10_r33_CVE-2021-22924
| | | | | | / | | | | | | | | | || | | | |/|| \| README Curl — это инструмент командной строки для передачи данных по указанному синтаксису URL. Узнайте, как пользоваться curl, прочитав man-страницу curl.1 или документ MANUAL. Узнайте, как установить Curl, прочитав документ INSTALL. libcurl —...
CVE-2026-100740
CVE-2026-100740 — D-Link DIR-895L L2TP OOB 쓰기 CVE-2026-100740 — D-Link DIR-895L 펌웨어 A1102b07 에 대한 Python 3 PoC. 설명 PoCbit / GitHub CVE-2026-100740 — L2TP 제어 채널 파서의 tunnelsetparams tunnel.c에서 발생하는 범위를 벗어난 쓰기CWE-787 / CWE-119. Host Name AVP 길이는 127로 제한되지만 NUL 종료 문자가 128바이트 버퍼의 peerhostnamelen+1 위치에...
CVE-2025-32023
CVE-2025-32023 Redis HyperLogLog 작업에서의 원격 코드 실행 취약점 요약 CVE-2025-32023 은 Redis 데이터베이스에서 HyperLogLog 데이터 구조 작업 처리에 영향을 미치는 원격 코드 실행RCE 취약점 입니다. 이 결함으로 인해 인증된 사용자가 조작된 문자열을 제출하여 스택 또는 힙 기반 경계 초과 쓰기를 유발할 수 있으며, 잠재적으로 서버에서 임의의 코드를 실행할 수 있습니다. 이 취약점은 희소 HyperLogLog 인코딩 처리 과정에서의 정수 오버플로우에서 비롯됩니다. GitHub...
redis-stack-CVE-2024-55656
CVE-2024-55656 - Redis Stack - RedisBloom: уязвимость удаленного выполнения кода из-за целочисленного переполнения Название: Redis Stack RedisBloom: уязвимость удаленного выполнения кода из-за целочисленного переполнения ZDI: ZDI-25-009 CVE: CVE-2024-55656 Авторы: rick2600 and gqsilva CVSS: 8.8...
Exploit for Out-of-bounds Write in Libtiff
libtiff CVE-2022-0891 — local build/diff + regression lab Bui...
CVE-2026-103628
An out of bounds write flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/549995090...
Linux Distros Unpatched Vulnerability : CVE-2026-103628
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML...
Rocky Linux 10.2 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_74442)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674442 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-82459
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer underflow wrap or wraparound, Out-of-bounds write vulnerability in Apache Thrift C++ 32 bit THeaderTransport. This issue affects Apache Thrift: before...
Debian dla-4816 : libpcre2-16-0 - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dla-4816 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4816-1 [email protected] https://www.debian.org/lts/security/...
Rocky Linux 9 [CIQ] Security Update: libpcap / libpcap-debuginfo / libpcap-debugsource / libpcap-devel (crlsa-2026_74441)
The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202674441 advisory. libpcap: libpcap: Out-of-bounds read and write vulnerability allows arbitrary memory access CVE-2026-0799 Tenable has extracted the preceding description block...
Linux Distros Unpatched Vulnerability : CVE-2026-47573
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA NVAPI for Windows contains a vulnerability where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerability might lead to...
DEBIAN-CVE-2026-103628
Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...