152319 matches found
OESA-2026-3857 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...
CVE-2024-1939
CVE-2024-1939 This is a short writeup for the CVE-2024-1939, which I used to claim V8CTF M122. The root cause of this issue is the lack of support for kWasmS128 in wasm-to-js conversion. Specifically, wasmS128Const operations occurring in parameter stacks are ignored, leading to type confusion wh...
CVE-2021-21017
CVE-2021-21017 又一个 Adobe Reader 字节顺序标记错误 : root@kitploit: IA32 plugin, ver. 2020.013.20074. char cdecl FUN2581894cchar baseurl,LPCSTR relurl ............................................................ ............................................................ if baseurl != char 0x0 && relurl !...
CVE-2026-90994
A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...
CVE-2026-90947
A flaw was found in GIMP. When processing a specially crafted lighting preset file, the Lighting Effects filter does not properly validate the number of light sources. This can lead to an out-of-bounds write, corrupting memory. An attacker could exploit this by convincing a user to open a malicio...
DEBIAN-CVE-2026-90463
A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to the NSS responder's UNIX socket, to cause an out-of-bounds read. This out-of-bounds read may lead to a denial of service DoS by crashing...
CVE-2026-90463
A flaw was found in the sssd NSS responder. This input validation vulnerability allows a local attacker, by sending specially crafted service lookup requests to the NSS responder's UNIX socket, to cause an out-of-bounds read. This out-of-bounds read may lead to a denial of service DoS by crashing...
CVE-2026-54542
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk whose proof contains a TrieNodeChild suffix that is individually valid but exceeds th...
CVE-2026-84445 gRPC-Go: Denial of Service (DoS) via crash due to missing `:authority` and `Host` headers in the xDS servers
gRPC-Go is the Go language implementation of gRPC. Prior to 1.82.2 and 1.83.2, servers created with xds.NewGRPCServer allow internal/transport/http2server.go to accept an RPC containing neither the :authority header nor the Host header, while RouteAndProcess in internal/xds/server/routing.go...
CVE-2026-55200
🚨 CVE-2026-55200 - 重大な libssh2 境界外書き込み脆弱性 📌 概要 CVE-2026-55200 は、広く展開されている libssh2 ライブラリに影響を与える 重大なメモリ破損脆弱性 です。 この欠陥は、パケット処理中のSSHパケット長フィールドの不適切な検証に起因し、リモート攻撃者がヒープ破損を引き起こし、特定の状況下で リモートコード実行 RCE を達成する可能性があります。 🔥 深刻度 🎯 影響を受けるソフトウェア コンポーネント| 影響を受けるバージョン ---|--- libssh2| = 1.11.1 🧠 技術的詳細 脆弱な関数...
CVE-2026-90994 Sssd: sssd: denial of service via malformed pam v1 requests
A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...
EUVD-2026-77588
A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...
CVE-2026-90994
A vulnerability in sssd (System Security Services Daemon) allows a local denial of service via the PAM responder's protocol v1 parser , specifically the function pam_parse_in_data() . An attacker with access to the PAM responder's UNIX socket can negotiate protocol v1 and send an empty or truncat...
CVE-2026-90994 Sssd: sssd: denial of service via malformed pam v1 requests
A flaw was found in sssd, specifically within the PAM Pluggable Authentication Modules responder's protocol v1 parser, pamparseindata. A local client with access to the PAM responder's UNIX socket can exploit this by negotiating protocol v1 and sending an empty or truncated PAM request body. This...
CVE-2026-11645-Out-of-bounds-Read-Write
CVE-2026-11645 - Chrome V8 Out-of-Bounds Read/Write Exploit ⚠️ WARNING This code is ONLY for educational purposes and authorized testing. 📋 Description CVE-2026-11645 is an out-of-bounds read and write OOB vulnerability in the V8 engine of Google Chrome. A remote attacker can execute arbitrary cod...
EUVD-2026-77574
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk whose proof contains a TrieNodeChild suffix that is individually valid but exceeds th...
CVE-2026-54542
Nimiq core-rs-albatross (the nimiq-primitives crate) versions ≤ 1.5.1 are affected by an out-of-bounds panic in KeyNibbles::Add (primitives/src/key_nibbles.rs). The method indexes a 63-byte backing array with the combined length of a parent key and a child suffix without bounds-checking the total...
CVE-2026-54542 Nimiq: Out-of-bounds panic in KeyNibbles::Add from oversized child suffix in a deserialized proof
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Prior to 1.6.0, a malicious state-sync peer can crash a syncing node by sending a crafted TrieChunk whose proof contains a TrieNodeChild suffix that is individually valid but exceeds th...
CVE-2024-21762-Safe-Check
CVE-2024-21762 - FortiOS SSL VPN 範囲外書き込み 概要...
CVE-2023-36407
CVE-2023-36407 これはCVE-2023-36407、Hyper-Vの権限昇格の脆弱性のPoCです。 https://github.com/pwndorei/CVE-2023-36407/assets/96749184/a8ef87d3-e0d0-40e5-9b23-35ab057a9c78 脆弱性 winhvr.sys!WinHvGet/SetVpStateを介した非ページプールへの/からのOOB読み取り/書き込み 再現手順 使用環境: Windows 11 22H2 x64 パッチ: kb5031354 WinHvSetVpStateの制御コード: 0x221268...