6799 matches found
SUSE SLES15 Security Update : freerdp (SUSE-SU-2026:1129-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:1129-1 advisory. - CVE-2026-26271: Buffer Overread in FreeRDP Icon Processing bsc1258979. - CVE-2026-26955: Out-of-bounds Write in freerdp bsc1258982. -...
cve-images
cve-images — 意図的に脆弱なラボイメージ 隔離されたラボでセキュリティ学習を行うための意図的に脆弱な Dockerイメージのコレクションです。nginxのCVE再現から始まり、脆弱性設計イメージ(DVWAなど)のより広範なセットへと成長しています。 ⚠️ 安全性 これらのイメージは 意図的に 脆弱です。nginxのCVEの1つ(CVE-2026-42945)は実際に悪用されています。隔離された/ローカルネットワーク上でのみ実行してください。公開ホストへのデプロイは決して行わず、本番イメージとして公開しないでください。各イメージには lab.vulnerable=true...
CVE-2024-5535
CVE-2024-5535 PoC - OpenSSL NPN バッファオーバーリード 注記: これは私たちが発見したものではありません。私たちは公開情報に基づいて、これに対するPoCを作成しただけです。 https://nvd.nist.gov/vuln/detail/cve-2024-5535...
kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...
Citrix-Bleed-Buffer-Overread-Demo
Citrix-Bleed-Buffer-Overread-Demo 이 코드는 C에서 snprintf 반환 값을 부적절하게 처리하는 Citrix Bleed 취약점CVE-2023-4699을 기능적으로 근사화합니다...
kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...
overread
overread CVE-2023-4966 Citrix Bleed オーバーリードバグをシミュレートします これは、ハーバード大学のCS50 Cybersecurity 2023のための最終プロジェクトです。これはバグについてです。小さなバグが、巨大で継続的な影響を及ぼしています。このプレゼンテーションでは、ある開発者の小さなミスから得られた「出血する洞察」を共有します。そのミスは、何百万人もの人々にとって大きな問題を引き起こし続けています。 動画 Citrix Bleed 動画(YouTube) 2023年12月4日録画 メモ このC言語のデモプログラムは、snfprintf...
kernel: scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd()
A flaw was found in the Linux kernel's iSCSI Internet Small Computer System Interface target subsystem. This vulnerability involves a buffer overread and a double-free error when processing iSCSI Text commands. A remote attacker could exploit these issues by sending specially crafted network...
CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...
CVE-2026-59956
OpenImageIO , a toolset for reading, writing, and manipulating image files used in VFX/animation, is affected by a heap-buffer-overread in IffInput::readimg() . When processing an uncompressed 16-bit IFF image with a z-buffer, the function allocates a temporary scanline based on m_header.rgba_cou...
CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...
CVE-2026-59956 OpenImageIO: Heap-buffer-overread in IffInput::readimg() when ZBUFFER flag is set
OpenImageIO is a toolset for reading, writing, and manipulating image files of any image file format relevant to VFX / animation. Prior to 3.0.20.0, 3.1.15.0, and 3.2.0.3-beta1, An uncompressed 16-bit iff image with a z-buffer makes iffinput::readimg allocate a temporary scanline from...
Linux Distros Unpatched Vulnerability : CVE-2026-92498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath6kl: avoid buffer overreads in WMI event handlers The following WMI event handlers currently read from the event buffer without first verifying that th...
Linux Distros Unpatched Vulnerability : CVE-2026-93129
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 platform/x86: dell-wmi: Recognise or support new...
EulerOS Virtualization 2.11.1 : util-linux (EulerOS-SA-2026-3479)
According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in util-linux. This vulnerability allows a heap buffer overread when processing 256-byte usernames, specifical...
Linux Distros Unpatched Vulnerability : CVE-2026-92497
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath12k: Avoid buffer overread in ath12kwmioprx Currently, in ath12kwmioprx, the firmware buffer is read without first verifying that the buffer has enough...
Linux Distros Unpatched Vulnerability : CVE-2026-92496
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wifi: ath11k: Avoid buffer overread in ath11kwmitlvoprx Currently, in ath11kwmitlvoprx, the firmware buffer is read without first verifying that the buffer has...
DEBIAN-CVE-2026-93129
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...
CVE-2026-93129
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...
AZL-102485 CVE-2026-93129 affecting package kernel 6.6.157.1-1
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-base: Fix handling of ultra performance key The commit message of commit 5fbd827eb9c2 "platform/x86: dell-wmi: Recognise or support new switches" states that the ultra performance key contains additional da...