12490 matches found
PT-2026-92078
FreeRDP before 3.31.0 contains a buffer over-read vulnerability in the rts read result function within the RPC gateway transport parser. Attackers can send a malicious BIND ACK PDU with a truncated result entry to trigger an out-of-bounds read causing process abort...
HPE-Aruba-AOS8-Vulnerabilities
⚠️ 披露状态： 本仓库中的所有发现已于 2026 年 5 月至 6 月期间 提交至 HPE Networking 漏洞赏金计划（Bugcrowd）。六份提交中有五份 在分类（triage）阶段被标记为“不适用（Not Applicable）”关闭， 且未对提交的证据进行技术性核对。 截至 2026 年 6 月，未发布任何修复。 完整报告来源 https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/ https://netacoding.com/posts/xxe-ssrf...
cve-2022-21877
POC CVE-2022-21877 このリポジトリは、STAR Labsで働くQuang Linhによって発見されたCVE-2022-21877のPOCを含んでいます。これはspaceport.sysドライバ内で見つかった情報漏洩です。 付属のブログ記事はこのアドレスで見つけられます。 使用方法 POCをビルドするには、.\buildを実行するだけです。 実行するには、Tierを取得できるプールが必要です。私のテストでは、これは少なくとも2つのストレージプール（最初のプールともう1つ）が必要であることを意味します。最初のプールにはTierをアタッチできないからです。...
HeartLeak
HeartLeak 又一个针对史上最热门的漏洞的利用脚本。 该脚本有两个功能： scan: 生成随机主机（IP地址），检查它们是否支持OpenSSL，测试它们是否存在CVE-2014-0160（心跳缓冲区过度读取漏洞）漏洞，并将存在漏洞的主机保存到TXT文件中 monitor: 持续发送恶意心跳请求，将泄露的数据原样转储到文件中。同时查找可打印数据，将其保存到TXT文件中并在屏幕上显示。...
Astra Linux – Vulnerability in glusterfs
In Gluster GlusterFS 11.0, there is a stack-based buffer over-read issue in xlators/mount/fuse/src/fuse-bridge.c...
Astra Linux – Vulnerability in Apache2
Buffer Over-read vulnerability in Apache HTTP Server due to outbound OCSP requests sent to an attacker-controlled OCSP server This issue affects Apache HTTP Server versions 2.4.0 through 2.4.67. Users are recommended to upgrade to version 2.4.68, which addresses this vulnerability...
Astra Linux – Vulnerability in Linux
A buffer overflow at the framebuffer layer in the fbcon code within the Linux kernel, prior to version 5.8.15, could be exploited by local attackers to read kernel memory, referred to as CID-6735b4632def...
CVE-2019-19203
CVE-2019-19203 在 Oniguruma 6.x 至 6.9.4rc2 之前版本中发现了一个问题。在文件 gb18030.c 的函数 gb18030mbcenclen 中，一个 UChar 指针在未检查是否超过匹配字符串末尾的情况下被解引用。这会导致基于堆的缓冲区过度读取。 研究人员：ManhND（The Tarantula Team 成员）、VinCSS（Vingroup 成员） 什么是 Oniguruma Oniguruma 由 K. Kosako 开发，是一个采用 BSD 许可证的正则表达式库，支持多种字符编码。Ruby 编程语言 1.9 版本以及 PHP...
httpd: mod_proxy_ajp: heap-based buffer over-read due to missing null-termination check
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the server fails to properly check if a string is null-terminated before attempting to read it, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue...
httpd: Apache HTTP Server: Buffer Over-read via outbound OCSP requests to attacker-controlled server
A flaw was found in Apache HTTP Server. This buffer over-read vulnerability occurs when the server processes outbound Online Certificate Status Protocol OCSP requests directed to an attacker-controlled OCSP server. This could allow a remote attacker to read sensitive information from memory or...
httpd: mod_proxy_ajp: heap-based buffer over-read and memory disclosure in ajp_parse_data()
A flaw was found in the modproxyajp module of httpd. When processing AJP Apache JServ Protocol messages, the ajpparsedata function attempts to read data beyond the allocated buffer size, allowing an attacker or a malformed request to cause a heap-based buffer over-read. This issue potentially lea...
CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
UBUNTU-CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90610
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90610
CVE-2026-90610 is a buffer over-read (heap, size 20) in the function gf_svg_attributes_copy within scenegraph/svg_attributes.c , part of the MP4Box component of the GPAC media framework. The flaw is reachable with local access and low privileges , requiring no user interaction. Impact is limited ...
CVE-2026-90610 GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
CVE-2026-90610 GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
EUVD-2026-77165
A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...
PT-2026-91002
A vulnerability was found in GPAC up to f1219cde. This affects the function gf svg attributes copy of the file scenegraph/svg attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made publi...