CVE-2026-59347

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

Rainfall

Rainfall Rainfall은 Snow Crash보다 약간 더 복잡한 ISO 챌린지입니다. 리버스 엔지니어링을 깊이 파고들고, 코드를 재구성하는 법을 배우며, 결함을 감지하기 위해 이를 이해해야 합니다. 마지막 레벨에 도달할 수 있을까요? 설명 Rainfall은 42의 사이버보안 분야에서 진행되는 프로젝트로, Snow Crash의 뒤를 잇습니다. 그러나 그 목표는 ELF 형식의 C 실행 파일을 익스플로잇하는 것입니다. 각 레벨의 비밀번호를 얻기 위해 다양한 기법을 사용해야 합니다: 버퍼 오버플로우 포맷 문자열 취약점 셸코드...

RLSA-2026:76747 Important: freerdp security update

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fixes: FreeRDP: FreeRDP: Denial of Service via crafted Surface Bits command...

RLSA-2026:76877 Moderate: ghostscript security update

The Ghostscript suite contains utilities for rendering PostScript and PDF documents. Ghostscript translates PostScript code to common bitmap formats so that the code can be displayed or printed. Security Fixes: ghostscript: ghostscript: Heap buffer overflow via JPEG 2000 output adapter...

freerdp security update

An update is available for freerdp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released...

ghostscript security update

An update is available for ghostscript. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Ghostscript suite contains utilities for rendering PostScript and PDF...

CVE-2019-9766

CVE-2019-9766 최선을 다하겠습니다 CVE 정보 Free MP3 CD Ripper .mp3 파일과 다른 파일 형식 간의 변환기입니다 파일 변환. 버그 NVD에 따르면, vision 2.6에서 버퍼 영역의 스택 기반 오버플로우stack-based overflow가 발견되었습니다. 따라서 이에 대한 PoC를 만들 수 있습니다. 파일 형식을 .mp3로 변경하고 원격으로 공격합니다. 취약 버전 Free MP3 CD Ripper 2.6 환경 공격자: Ubuntu18.04.2lts 피해자: Windows10에...

EUVD-2026-94169

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2026-59347 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2026-59347

VMware Workstation and VMware Fusion are affected by a stack-based buffer-overflow vulnerability in the HGFS component. A malicious actor with local administrative privileges on a virtual machine can exploit this issue to execute arbitrary code as the virtual machine's VMX process running on the ...

CVE-2026-59347 VMware Workstation and Fusion HGFS stack-based buffer-overflow vulnerability

VMware Workstation and Fusion contain a stack-based buffer-overflow vulnerability in HGFS. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. Affected versions: - VMware...

CVE-2014-0160

CVE-2014-0160 Heartbleed를 사용하여 웹앱 메모리 유출을 위한 실습 랩 구축 이 저장소는 Heartbleed 기술을 사용하여 nginx를 악용할 수 있는 쉬운 환경을 구축하는 데 중점을 둡니다. Docker를 사용한 환경 구축 서버 설정 다이어그램 데모 단계 서버 다이어그램 CVE-2014-0160 문제는 OpenSSL 라이브러리가 TLS 하트비트 기능의 버퍼 크기를 64KB로 제공하여 메모리 오버플로우를 일으켜 서버 메모리의 민감한 정보가 누출될 때 발생합니다. 공격 흐름 heartbleed.py 페이로드 ...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

CVE-2026-81535

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

kernel: scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer

A flaw was found in the Linux kernel's libiscsitcp component. A remote attacker, acting as a malicious iSCSI target, could send a specially crafted iSCSI SCSI Command Response ISCSIOPSCSICMDRSP with an oversized data segment. This could lead to a buffer overflow in a fixed-size buffer, potentiall...

kernel: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events

In the Linux kernel, the following vulnerability has been resolved: ALSA: firewire-motu: fix buffer overflow in hwdep read for DSP events The DSP event handling code in hwdepread could write more bytes to the user buffer than requested, when a user provides a buffer smaller than the event header...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabilit...

CVE-2026-106247

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524435922...

CVE-2026-81535 wolfSSH SSH client accepts unsolicited forwarded-tcpip channel opens without an authorization check

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...

EUVD-2026-94162

In wolfSSH through 1.5.0 built with --enable-fwd, DoChannelOpen in src/internal.c gates only direct-tcpip channel opens with the forwarding policy callback. forwarded-tcpip opens are admitted without an authorization check and are not capped in number, allowing a malicious SSH peer to make an...