CVE-2021-31630

OpenPLC WebServer v3 - 认证 RCE CVE-2021-31630 此漏洞利用基于 Exploit-DB 上由 Fellipe Oliveira 制作的漏洞利用。 首先，进行身份认证 上传恶意 C 文件 编译它 启动 PLC（发起反向Shell） 停止 PLC（无需运行，反向Shell已发起） root@kitploit: └─ python3 customexploit.py --url http://10.10.11.7:8080 --username openplc --password openplc --listenerip 10.10.16.4...

Astra Linux – Vulnerability in zvbi

A vulnerability has been identified in libzvbi up to version 0.2.43. This vulnerability has been declared as problematic. The affected function is vbistrndupiconvucs2 in the file src/conv.c. Manipulation of the srclength argument leads to integer overflow. This vulnerability can be exploited...

Astra Linux – Vulnerability in OpenVSwitch

It has been discovered that openvswitch 2.17.8 contains a memory leak due to the xmalloc function in openvswitch-2.17.8/lib/util.c...

DEBIAN-CVE-2026-17513

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggmlftypetoggmltype of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through ...

CVE-2026-17513

CVE-2026-17513 affects ggml-org whisper.cpp; the issue lies in ggml_ftype_to_ggml_type in ggml/src/ggml.c where manipulation of the ftype argument leads to a reachable assertion. Reportedly requires local access; the project was informed via an issue but has not responded. No remediation or explo...

PT-2026-61000

A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function claw net get/claw net post of the file claw/services/tools/net.c of the component http request. The manipulation results in information disclosure. The attack can be executed remotely. The exploit has been made publ...

CVE-2026-40469 Heap buffer overflow in gawk

Integer overflow vulnerability has been found in "builtin.c" program file of gawk dosub routine. This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below...

Allocation of Resources Without Limits or Throttling

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

PT-2026-48158

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A segmentation violation occurs in the gf hevc read sps bs internal function within the media tools/av parsers.c file. This issue allows attackers to cause a Denial of Service DoS by providing specially...

PT-2026-47240

A flaw has been found in kokke tiny-regex-c up to f2632c6d9ed25272987471cdb8b70395c2460bdb. This vulnerability affects the function matchstar of the file re.c of the component Pattern Handler. This manipulation causes inefficient regular expression complexity. The attack is restricted to local...

EUVD-2026-31740

A vulnerability was identified in GNU LibreDWG up to 0.14. This affects the function decompressR2004section of the file src/decode.c of the component Dwgread Utility. The manipulation leads to heap-based buffer overflow. The attack must be carried out locally. The exploit is publicly available an...

The vulnerability of the special_keys() function in the src/netbeans.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the specialkeys function in the src/netbeans.c file of the Vim text editor is related to the execution of an operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the get_tagfname() function in the src/tag.c file of the Vim text editor allows a hacker to execute arbitrary code.

The vulnerability of the gettagfname function in the src/tag.c file of the Vim text editor is related to buffer overflows during the processing of the helpfile parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the dw2102_i2c_transfer() function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the dw2102i2ctransfer function in the drivers/media/usb/dvb-usb/dw2102.c file of the multimedia device driver for the Linux operating system is related to the use of pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20260403-73-0031

A vulnerability in the mips/kernel/process.c component of the Linux kernel is related to pointer dereferencing errors. Exploitation of the vulnerability allows an attacker to cause a denial of service...

389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schemaattrenumcallback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting...

CVE-2026-4745

CVE-2026-4745 is an Arbitrary Code Execution in dendibakh perf-ninja (labs/misc/pgo/lua modules) linked to the vulnerable program file ldo.C. The issue arises from improper generation of code (Code Injection) in perf-ninja, affecting the Lua-related components. The CVSS 4.0 base score is 10.0 (CR...

CVE-2026-4737 Use-After-Free Vulnerability in No-Chicken/Echo-Mate

Use After Free vulnerability in No-Chicken Echo-Mate ‎SDK/rv1106-sdk/sysdrv/source/kernel/mm modules. This vulnerability is associated with program files rmap.C‎. This issue affects Echo-Mate: before V250329...

CVE-2026-4737

CVE-2026-4737 is a Use-After-Free in No-Chicken Echo-Mate affecting the SDK/rv1106-sdk/sysdrv/source/kernel/mm modules, specifically in rmap.C. Affected: Echo-Mate prior to version V250329. Root cause: memory management issue in the mm components. CVSS metrics indicate LOCAL attack vector, HIGH i...

CVE-2026-4731 An Integer Overflow Vulnerability in artraweditor/ART

Integer Overflow or Wraparound vulnerability in artraweditor ART ‎rtengine‎ modules. This vulnerability is associated with program files dcraw.C. This issue affects ART: before 1.25.12...