Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: media: rainshadow-cec: The TOCTOU race condition in raininterrupt has been fixed. In the interrupt handler raininterrupt, the check for buffer fullness on rain-buflen is performed before acquiring rain-buflock. This creates a...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: perf/x86/intel/pt: Fixed a crash that occurred with stop filters in single-range mode. A check for !buf-single was added before calling ptbufferregionsize in places where a missing check could cause a kernel crash. This fix...

Astra Linux – Vulnerability in StrongSwan

StrongSwan before version 5.9.12 has a buffer overflow vulnerability, and there is a possibility of unauthenticated remote code execution through a DH public key value that exceeds the internal buffer of charon-tkm’s DH proxy. The earliest affected version is 5.3.0. An attack can occur through a...

Astra Linux – Vulnerability in opensc

The TCOS smart card software driver in OpenSC before version 0.21.0-rc1 has a stack-based buffer overflow in the tcosdecipher function...

CVE-2019-17147

CVE-2019-17147: Эксплуатация TP-Link TL-WR841N Обзор Этот репозиторий документирует полный процесс обратной разработки и эксплуатации CVE-2019-17147 — критической уязвимости удалённого выполнения кода RCE в маршрутизаторе TP-Link TL-WR841N архитектура MIPSEL. Уязвимость находится в веб-сервере...

CVE-2026-42945-nginx-rift-poc

NGINX Rift — CVE-2026-42945 RCE proof-of-concept для CVE-2026-42945 , критического переполнения буфера в куче в модуле ngxhttprewritemodule NGINX, появившегося в 2008 году. Позволяет неаутентифицированное удаленное выполнение кода на серверах, использующих комбинации rewrite ... ?... + set для...

kernel: crypto: af_alg - Cap AEAD AD length to 0x80000000

A flaw was found in the Linux kernel's afalg cryptography module. This vulnerability involves an arithmetic overflow when processing associated data lengths during the transmit buffer size check. A remote attacker could exploit this flaw by providing a specially crafted associated data length,...

USN-8865-1 edk2 vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

USN-8865-1: EDK II vulnerabilities

It was discovered that EDK II incorrectly handled CMS key unwrapping in the embedded OpenSSL library. An attacker could possibly use this issue to cause a heap buffer overflow, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu...

Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: Fix libelf handle not being closed, resulting in build errors...

SUSE-SU-2026:4457-1 Security update for rpm

This update for rpm fixes the following issue: Security issues fixed: - CVE-2026-44605: heap buffer overflow in NDB database backend due to unchecked 32-bit arithmetic when parsing the slot table bsc1269584. Other updates and bugfixes: - Fix libelf handle not being closed, resulting in build erro...

CVE-2025-43300

📚 CVE-2025-43300 - 脆弱性の詳細分析 🎯 概要 CVE-2025-43300 は、DNG Digital Negative ファイルの処理におけるバッファオーバーフロー の脆弱性であり、TIFF メタデータと JPEG データの不一致 によって発生し、リモートコード実行 RCE を可能にします。 🔍 1. DNGファイルの構造 階層構造: DNG File ├── TIFF Container metadados │ ├── Header │ ├── IFD Image File Directory │ │ ├── Tag 277: SamplesPerPixel...

CVE-2026-105285

A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file /boafrm/formIpQoS of the component QoS Rule Handler. The manipulation of the argument addQos/comment/entryname leads to stack-based buffer overflow. Remote exploitatio...

libgd: buffer overflow when processing specially crafted GIF file

A flaw was found in libgd. Processing a specially crafted GIF file allows a remote attacker to trigger a buffer overflow, resulting in an application crash and a denial of service. Arbitrary code execution is possible in theory, but considered highly unlikely because standard image decompression...

Important: Red Hat Security Advisory: gd security update

An update for gd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

nginx-rift-detect

nginx-rift-detect Скрипт поведенческого обнаружения для CVE-2026-42945 NGINX Rift — переполнения кучи в ngxhttprewritemodule, присутствующего в nginx с 2008 года. ⚠️ Отказ от ответственности Этот инструмент предназначен исключительно для авторизованного тестирования безопасности и исследований...

CVE-2026-42945

CVE-2026-42945 Nginx Rift - PoC 툴킷 CVE-2026-42945Nginx Rift에 대한 포괄적인 개념 증명PoC 툴킷입니다. 이는 Nginx의 ngxhttprewritemodule에서 발생하는 치명적인 힙 버퍼 오버플로우 취약점입니다. 취약점 요약 필드| 세부 사항 ---|--- CVE ID| CVE-2026-42945 이름| Nginx Rift 유형| 힙 버퍼 오버플로우 구성 요소| ngxhttprewritemodule 심각도| 치명적CVSS 9.2 영향 버전| Nginx 0.6.27 - 1.30....

CVE-2025-60752

CVE-2025-60752 PoC уязвимости CVE-2025-60752 Затронутый продукт: Tinyc Http Server Полная статья с описанием доступна по адресу https://zer0matt.blogspot.com/2026/05/cve-2025-60752-tinyc-http-server-stack.html Описание Переполнение буфера стека происходит, когда Tinyc получает специально...

lab-cve-2023-4863

CVE-2023-4863 — libwebp 익스플로잇 연구소 완전히 격리되고 자동화된 Docker 환경에서 CVE-2023-4863libwebp의 힙 버퍼 오버플로을 재현합니다. CEFIRE의 윤리적 해킹 모듈 실습을 기반으로 합니다. 이 연구소가 하는 일 사설 네트워크에 8개의 컨테이너를 띄웁니다: Container| 역할 ---|--- attacker| craft.c로 exploit.webp를 생성하고, 가짜 피싱 페이지와 함께 HTTP로 제공 victim-cli| Ubuntu 22.04, libwebp...

CVE-2025-20260-POC

ЭКСПЛОЙТ CVE-2025-20260 Это доказательство концепции для CVE-2025-20260. Это уязвимость в процессах сканирования PDF программного обеспечения ClamAV. Отправляя специально созданный, вредоносный PDF-файл, можно вызвать переполнение буфера, что приведет к отказу в обслуживании или произвольному...