SpeculativeExecutionAssessment

SpeculativeExecutionAssessment Оценивает систему на наличие уязвимостей «спекулятивного выполнения», описанных в: CVE-2017-5715 инъекция цели перехода CVE-2017-5753 обход проверки границ CVE-2017-5754 загрузка недействительных данных в кеш ВНИМАНИЕ: Убедитесь, что опция «Prefer 32-bit» не отмечен...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

libpcap security update

14:1.10.0-4.1 - Fix CVE-2026-0799: add bounds checks for BPF scratch memory register indices in the BPF interpreter Related: RHEL-256935...

Linux Distros Unpatched Vulnerability : CVE-2026-95616

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

EUVD-2026-89801

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

CVE-2026-95616

An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticated attacker can send a SOAP message carrying an X.509 certificate whose SubjectKeyIdentifier extension declares a length of 0x7FFFFFFF; WSS4J decodes this while resolving the signature's...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Exploit de preuve de concept pour CVE-2026-8836, un débordement de tampon critique basé sur la pile dans le gestionnaire SNMPv3 USM de lwIP. Vulnerability CVE : CVE-2026-8836 CVSS : 9.8 Critique Composant : snmpparseinboundframe dans...

SUSE CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

CVE-2026-31694-POC

CVE-2026-31694: Écriture hors limites dans le cache readdir de FUSE Un contrôle de limites manquant dans fs/fuse/readdir.c:fuseadddirenttocache. Un serveur FUSE renvoie un dirent avec namelen = 4095, qui se sérialise en un enregistrement de 4120 octets. Le noyau le copie dans une seule page de...

CVE-2026-11105-Stack-Buffer-Overflow-in-Custom-Base64-Decoder

CVE-2026-11105 – Переполнение буфера стека в собственном декодере Base64 Код программы C // base64vuln.c - Vulnerable Base64 decoder include include include int base64decodeconst char in, sizet inlen, char out, sizet outlen static const char table =...

spectre-attack-example

Exemple d'attaque Spectre 2 janvier 2018 CVE-2017-5753 et CVE-2017-5715 Exemple d'exploitation de la vulnérabilité Spectre « Ghost » Qu'est-ce que c'est ? Nous plaçons le texte « The Magic Words are Squeamish Ossifrage. » en mémoire, puis nous essayons de le lire en exploitant la vulnérabilité. S...

CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

UBUNTU-CVE-2026-98146

In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the structure is stored in shared AMDXDNABOSHARE memory, userspace can modif...

UBUNTU-CVE-2026-97917

In the Linux kernel, the following vulnerability has been resolved: accel/ivpu: Validate full buffer range in ivputocpuaddr Add a size parameter to ivputocpuaddr and validate that the whole vpuaddr, vpuaddr + size range stays within the BO...

CVE-2026-98146

The Linux kernel contains a vulnerability in the accel/amdxdna component. The struct amdxdna_cmd_chain utilizes a flexible array annotated with __counted_by(command_count). Because this structure resides in shared AMDXDNA_BO_SHARE memory, userspace can concurrently modify command_count. If an att...

PT-2026-98798

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds read exists in the NTFS driver. The function ntfs attr find in attrdef iterates through the in-memory $AttrDef table, but the loop condition only validates the start of...

CVE-2026-98159: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: validate CLC firmware records The CLC region is supplied by firmware, but the loader trusts the region count and each record length. A malformed image can make the region table pointer precede the firmware...

Linux Distros Unpatched Vulnerability : CVE-2026-98146

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/amdxdna: Remove countedby from struct amdxdnacmdchain struct amdxdnacmdchain contains a flexible array annotated with countedbycommandcount. Since the...

DEBIAN-CVE-2026-97495

In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on allocatedoorbell allocateddoorbell has an option to set the doorbell id to a specific value used by CRIU. This value was not bounds checked. Check to confirm it's less than KFDMAXNUMOFQUEUESPERPROCESS...