DEBIAN-CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029

HDF5 versions through 2.2.0 are vulnerable to a heap-based buffer over-read within the H5Z__filter_scaleoffset() function located in src/H5Zscaleoffset.c. The root cause occurs when the decoder copies d_nelmts * size bytes from a compressed chunk without verifying if the chunk contains sufficient...

CVE-2026-19029 HDF5 scale-offset filter heap buffer over-read via crafted chunk

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

EUVD-2026-93981

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029 HDF5 scale-offset filter heap buffer over-read via crafted chunk

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

CVE-2026-19029

A heap-based buffer over-read in H5Zfilterscaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies dnelmts size bytes...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...

CVE-2026-57546 Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-57546 Buffer Over-read in WLAN HAL

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

CVE-2026-57546

A Buffer Over-read vulnerability exists in the WLAN HAL component. The flaw occurs during the processing of a continuous receive command when a zero-sized global configuration override is present, leading to a transient Denial of Service (DoS) . No specific software versions or remediation steps ...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ Heartbleed의 고대 사촌, 1997년부터 Squid에 숨어있습니다. ✨ 기능 단일 파일 PoC — 종속성 없음 NetWare 배너를 모방하고 LIST 응답을 잘라내는 악의적인 FTP 서버 Basic Auth 및 Bearer 토큰의 실시간 탐지 및 디코딩 더 빠른 유출을 위한 멀티스레드 힙 스프레이 실시간 통계가 포함된 깔끔하고 컬러화된 콘솔 출력 🚀 빠른 시작 git clone https://github.com/0xBlackash/CVE-2026-47729.git...

PT-2026-107251

A heap-based buffer over-read in H5Z filter scaleoffset in src/H5Zscaleoffset.c in HDF5 through 2.2.0 lets an attacker cause a denial of service application crash with a crafted HDF5 file. When the stored minimum bits equal the full precision of the datatype, the decoder copies d nelmts size byte...

CentOS Linux 7 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-filesystem / nginx-mod-devel / etc (CENTOS7:CLSA-2026:1790929459)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790929459 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxhttpmp4module module, which might allow an attacker to trigger a buffer over-re...

PT-2026-106522

In the Linux kernel, the following vulnerability has been resolved: wifi: libipw: reject TKIP frames without a full MIC libipw michael mic verify assumes that an skb contains an eight-byte Michael MIC. A short TKIP frame makes the unsigned payload length wrap, causing michael mic to read past the...

HPE-Aruba-AOS8-Vulnerabilities

⚠️ 開示状況: 本リポジトリのすべての調査結果は、 2026年5月〜6月の間にHPE Networkingバグ報奨金プログラムBugcrowdへ提出されました。 6件の提出のうち5件は、提出された証拠の技術的な整合確認が行われないまま、 トリアージ段階で「該当なしNot Applicable」とクローズされました。 2026年6月時点で修正は一切リリースされていません。 完全なライトアップのソース https://netacoding.com/posts/ghost-leak/ https://netacoding.com/posts/smurf-reflection/...

cve-2022-21877

POC CVE-2022-21877 이 저장소는 Quang Linh가 STAR Labs에서 근무 중 발견한 CVE-2022-21877에 대한 POC를 포함합니다. 이는 spaceport.sys 드라이버 내에서 발견된 정보 유출입니다. 관련 블로그 게시물은 이 주소에서 확인할 수 있습니다. 사용 방법 POC를 빌드하려면 .\build를 실행하기만 하면 됩니다. 실행하려면 머신에 Tier를 얻을 수 있는 풀이 필요합니다. 제 테스트에서는 적어도 두 개의 스토리지 풀원시 풀과 다른 하나이 있어야 합니다. 이는 원시 풀에는 Tier를...

HeartLeak

HeartLeak 또 하나의, 가장 이슈가 되었던 버그를 위한 익스플로잇 스크립트입니다. 이 스크립트는 두 가지 기능을 제공합니다: scan: 무작위 호스트IP 주소를 생성하고, OpenSSL을 지원하는지 확인하며, CVE-2014-0160Heartbeat 버퍼 초과 읽기 버그에 취약한지 테스트한 후 취약한 호스트를 TXT 파일에 저장합니다. monitor: 악의적인 heartbeat 요청을 계속 보내면서 유출된 데이터를 파일에 "그대로" 덤프합니다. 또한 인쇄 가능한 데이터를 찾아 TXT 파일에 저장하고 화면에 표시합니다...

CVE-2019-19203

CVE-2019-19203 Oniguruma 6.x 버전6.9.4rc2 이전에서 문제가 발견되었습니다. gb18030.c 파일의 gb18030mbcenclen 함수에서 UChar 포인터가 일치된 문자열의 끝을 넘었는지 확인하지 않고 역참조됩니다. 이로 인해 힙 기반 버퍼 오버리드가 발생합니다. 연구자: ManhND of The Tarantula Team, VinCSS a member of Vingroup Oniguruma란? Oniguruma는 K. Kosako가 개발한 BSD 라이선스 정규 표현식 라이브러리로, 다양한 문자...

FreeRDP: FreeRDP: Denial of Service due to buffer over-read in RPC gateway

A flaw was found in FreeRDP. A remote attacker can exploit a buffer over-read vulnerability within the RPC Remote Procedure Call gateway transport parser by sending a malicious BINDACK Protocol Data Unit PDU with a truncated result entry. This can lead to a process abort, resulting in a Denial of...