SUSE SLES15 Security Update : freerdp (SUSE-SU-2026:1129-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1129-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. -...

cve-images

cve-images — 意図的に脆弱なラボイメージ 隔離されたラボでセキュリティ学習を行うための意図的に脆弱な Dockerイメージのコレクションです。nginxのCVE再現から始まり、脆弱性設計イメージ（DVWAなど）のより広範なセットへと成長しています。 ⚠️ 安全性 これらのイメージは 意図的に 脆弱です。nginxのCVEの1つ（CVE-2026-42945）は実際に悪用されています。隔離された/ローカルネットワーク上でのみ実行してください。公開ホストへのデプロイは決して行わず、本番イメージとして公開しないでください。各イメージには lab.vulnerable=true...

CVE-2024-5535

CVE-2024-5535 PoC - OpenSSL NPN バッファオーバーリード 注記: これは私たちが発見したものではありません。私たちは公開情報に基づいて、これに対するPoCを作成しただけです。 https://nvd.nist.gov/vuln/detail/cve-2024-5535...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

Citrix-Bleed-Buffer-Overread-Demo

Citrix-Bleed-Buffer-Overread-Demo 이 코드는 C에서 snprintf 반환 값을 부적절하게 처리하는 Citrix Bleed 취약점CVE-2023-4699을 기능적으로 근사화합니다...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

overread

overread CVE-2023-4966 Citrix Bleed オーバーリードバグをシミュレートします これは、ハーバード大学のCS50 Cybersecurity 2023のための最終プロジェクトです。これはバグについてです。小さなバグが、巨大で継続的な影響を及ぼしています。このプレゼンテーションでは、ある開発者の小さなミスから得られた「出血する洞察」を共有します。そのミスは、何百万人もの人々にとって大きな問題を引き起こし続けています。 動画 Citrix Bleed 動画（YouTube） 2023年12月4日録画 メモ このC言語のデモプログラムは、snfprintf...

kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()

A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956

OpenImageIO , a toolset for reading, writing, and manipulating image files used in VFX/animation, is affected by a heap-buffer-overread in IffInput::readimg() . When processing an uncompressed 16-bit IFF image with a z-buffer, the function allocates a temporary scanline based on m_header.rgba_cou...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set

OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...

Linux Distros Unpatched Vulnerability : CVE-2026-92498

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that th...

Linux Distros Unpatched Vulnerability : CVE-2026-93129

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 platform/x86: dell-wmi: Recognise or support new...

EulerOS Virtualization 2.11.1 : util-linux (EulerOS-SA-2026-3479)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifical...

Linux Distros Unpatched Vulnerability : CVE-2026-92497

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough...

Linux Distros Unpatched Vulnerability : CVE-2026-92496

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: Avoid buffer overread in ath11kwmitlvoprx Currently, in ath11kwmitlvoprx, the firmware buffer is read without first verifying that the buffer has...

DEBIAN-CVE-2026-93129

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...

CVE-2026-93129

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...

AZL-102485 CVE-2026-93129 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...