KSMBD-CVE-2025-37947

PoC de CVE-2025-37947 para ksmbd Para más información, consulta el artículo aquí. Archivos bpf-tracer.sh - rastreador BPF de msgmsg CVE-2025-37947.c - exploit para CVE-2025-37947 proof-of-concept.c - disparador mínimo que causa la escritura fuera de límites OOB ksmbd.conf - configuración de...

CVE-2026-27831-POC

CVE-2026-27831-POC PoC Exploit para CVE-2026-27831 Este es un exploit de prueba de concepto para la lectura fuera de límites basada en heap remoto en rldns versión 1.3 que provoca denegación de servicio. rldns es un servidor DNS de código abierto para linux, freebsd y netbsd, que se ejecuta en...

triton-cve-2025-23320

Demostración de CVE-2025-23320 Este repositorio replica CVE-2025-23320, demostrando CWE-209, Generación de mensajes de error que contienen información sensible Puntuación CVSS: 7.5. Esta vulnerabilidad existe en todos los servidores de inferencia NVIDIA Triton 25.06 y anteriores. Esta configuraci...

cve-2024-21762-poc

cve-2024-21762-poc CVE-2024-21762 es una vulnerabilidad crítica en los productos FortiOS y FortiProxy de Fortinet, presente en su componente SSL VPN. Esta vulnerabilidad permite a un atacante remoto no autenticado ejecutar código o comandos arbitrarios en el sistema objetivo mediante solicitudes...

CVE-2025-54957

Dolby Unified Decoder CVE-2025-54957 POC When a file is processed by Dolby's DDPlus Unified Decoder, an out of bounds write is possible when the evolution data is processed. The decoder writes evolution information into a large, heap-like contiguous buffer contained by a larger struct, and the...

kernel: nvmet-rdma: handle inline data with a nonzero offset

A flaw was found in the nvmet-rdma component of the Linux kernel. This vulnerability arises from incorrect handling of inline data with a non-zero offset, which can lead to an integer underflow. An attacker could exploit this to cause the system to read beyond its allocated memory, potentially...

kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer

A flaw was found in the Linux kernel's mana network driver. This Time-of-Check to Time-of-Use TOCTOU vulnerability allows a hardware component to modify a message identifier hwcmsgid in Direct Memory Access DMA memory after it has been validated but before it is used. This manipulation bypasses...

CVE-2026-0300-POC

🛡️ CVE-2026-0300: Análisis de RCE en el Portal User-ID™ de PAN-OS Prueba de Concepto de Investigación: CWE-787 Escritura Fuera de Límites 📌 Resumen CVE-2026-0300 es una vulnerabilidad de desbordamiento de búfer de alta gravedad identificada en el Portal de Autenticación User-ID™ Portal Cautivo de...

RLSA-2026:65993 Important: qt5-qtbase security update

Qt is a software toolkit for developing applications. The qt5-base packages contain base tools for string, xml, and network handling in Qt. Security Fixes: qt: Qt: Denial of Service via out-of-bounds read in text codec handling CVE-2026-9499 For more details about the security issues, including t...

qt5-qtbase security update

An update is available for qt5-qtbase. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Qt is a software toolkit for developing applications. The qt5-base package...

PT-2026-89504

Tesseract is an open source OCR engine. In version 5.5.3 and earlier, FullyConnected::DeSerialize in src/lstm/fullyconnected.cpp does not validate the deserialized layer scalars ni and no against the weight-matrix dimensions. During FullyConnected::Forward, MatrixDotVector in...

CVE-2026-87438

Out of bounds write in WebGL in Google Chrome on on Android prior to 1...

CVE-2026-87604

Out of bounds read in ANGLE in Google Chrome prior to 153.0.8010.36 al...

CVE-2026-87440

Out of bounds read in Media in Google Chrome prior to 153.0.8010.36 al...

PT-2026-89525

zstd-jni versions 1.5.5-6 through 1.5.7-13 contain an out-of-bounds read vulnerability in Zstd.getFrameContentSize that fails to validate negative srcPosition arguments. Attackers can supply negative offset values that bypass bounds checks and reach the native frame-header parser, causing...

vim security update

9.1.083-9.0.1.el102.20 - Remove upstream references Orabug: 31197557 2:9.1.083-9.20 - RHEL-253668 CVE-2026-28420 buffer overflow in terminal emulator 2:9.1.083-9.19 - RHEL-215660 CVE-2026-55892 vim: stack out-of-bounds write in dumpprefixes 2:9.1.083-9.18 - RHEL-215683 CVE-2026-59857 vim: stack...

UBUNTU-CVE-2026-87823

zstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three...

CVE-2026-79592

An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of libxls 1.6.3 , caused by insufficient validation of file-controlled OLE summary offsets. The CVSS 3.1 score is 7.5 (HIGH) with a network attack vector, low complexity, no privileges required, no user interaction, and ...

EUVD-2026-75746

An out-of-bounds read vulnerability exists in the xlsdumpSummary function of libxls 1.6.3 due to insufficient validation of file-controlled OLE summary offsets...

Linux Distros Unpatched Vulnerability : CVE-2026-88050

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tesseract is an open source OCR engine. In version 5.5.3 and earlier, RecodedCharID::DeSerialize in src/ccutil/unicharcompress.h validates length but accepts...