1141017 matches found
CVE-2026-89669
A flaw was found in the nfsd component of the Linux kernel. A use-after-free vulnerability exists due to improper initialization of the copy-notify state ID before its publication. A remote attacker could exploit this by sending a crafted OFFLOADCANCEL operation, leading to a race condition that...
CVE-2026-89659
A flaw was found in the Linux kernel's Network File System Daemon NFSD. This use-after-free vulnerability occurs during the delegation revoke process. When an expired delegation is unhashed, a timing window exists where the client can be prematurely freed before the revocation is complete. This c...
CVE-2026-48490
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
CVE-2020-14295
CVE-2020-14295 CVE-2020-14295 概念验证。原始帖子位于 exploit-db。 安装依赖 root@kitploit: python3 -m pip install -r requirements.txt 用法 root@kitploit: $ python3 cactisqlirce.py --help usage: cactisqlirce.py -h -t -u -p --lhost --lport Cacti 1.2.12 - SQL Injection / Remote Code Execution optional arguments: -h,...
CVE-2026-89504
A flaw was found in the Linux kernel's regulator subsystem. This vulnerability arises from a programming error where a device tree node pointer is released too early, creating a "dangling pointer"—a reference to memory that is no longer valid. This can lead to system instability, potentially...
CVE-2026-89467
A flaw was found in the Linux kernel's qcombattmgr component. This flaw is a use-after-free vulnerability that occurs because the qcombattmgrpdrnotify function can queue enablework even after the associated battmgr object has been deallocated. A local attacker could exploit this by triggering the...
CVE-2019-2729-Exploit
CVE-2019-2729-Exploit 用法: oracle-weblogic-deserialize.py -h -u TARGET -c COMMAND -h, --help : 显示帮助信息并退出 -u TARGET : 目标URL -c COMMAND : 要执行的命令 示例用法 python oracle-weblogic-deserialize.py -u http://192.168.1.1:8080 -c whoami YSS Payload 致谢 https://github.com/waffl3ss/CVE-2019-2729...
CVE-2026-89660
A flaw was found in the Linux kernel's Network File System Daemon NFSD. This vulnerability, a use-after-free, occurs during the revocation of client administrative states. A race condition can allow a client's memory to be freed prematurely while still being referenced, potentially leading to...
CVE-2026-89495
A flaw was found in ocfs2 in the Linux kernel. A malicious or compromised node within a Distributed Lock Manager DLM cluster can send specially crafted messages with unchecked length fields. This can lead to a heap out-of-bounds write, potentially allowing for arbitrary code execution, or an...
CVE-2026-89489
A flaw was found in the Linux kernel. The sysor1katomic syscall, specific to the openrisc architecture, does not adequately validate user-provided pointers. An unprivileged process can exploit this by supplying kernel addresses to the syscall, gaining unauthorized read and write access to kernel...
CVE-2026-48490 ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
CVE-2026-48490
ArduinoCore-avr (the source code and configuration files of the Arduino AVR Boards platform) contains a stack-based buffer overflow in its floating-point concatenation path. Versions prior to 1.8.8 are affected. Passing values near the extremes of the float or double range to String::concat(float...
CVE-2026-48490 ArduinoCore-AVR: Stack-Based Buffer Overflow in String float/double concatenation handler
ArduinoCore-avr contains the source code and configuration files of the Arduino AVR Boards platform. A vulnerability in versions prior to 1.8.8 allows an attacker to trigger a stack-based buffer overflow when concatenating floating-point values of sufficiently large magnitude onto an Arduino Stri...
CVE-2021-44852
CVE-2021-44852 在 Biostar RACING GT Evo 2.1.1905.1700 的 BSRCIO64.sys 中发现了一个问题。低完整性进程可以打开该驱动程序的设备对象并发出 IOCTL，以读取或写入任意物理内存位置（或调用任意地址），从而导致任意代码执行。这与 0x226040、0x226044 和 0x226000 相关。 我记得曾对这个特定漏洞进行过研究，认为它不可能被利用。好吧，如果我当时分析的是正确的 IO 控制码函数，那个分析确实成立。不用说，我错得不能再离谱了。 到明天下午，这将变成一个可正常工作的漏洞利用程序。...
CVE-2026-89654
A flaw was found in the Ceph file system component of the Linux kernel. A race condition exists in the checknewmap function during session handling. This allows a local attacker to exploit a use-after-free vulnerability by freeing a session while another thread attempts to access it. This could...
CVE-2026-89553
A flaw was found in the Linux kernel's nouveau/gem component. A race condition exists where the graphics execution manager GEM close path can close a virtual memory area VMA while an information lookup is still trying to access it. This timing issue leads to a use-after-free vulnerability, which...
CVE-2026-80952
A flaw was found in the Linux kernel's i3c master component. During device unregistration, a race condition can occur where the device descriptor is prematurely cleared. This can lead to an information leak, exposing kernel stack contents in the generated modalias. Additionally, this flaw could...
CVE-2026-80935
A flaw was found in the Linux kernel's Wi-Fi driver for MediaTek MT7996 devices. A malicious or malfunctioning Wi-Fi device can exploit improper validation of an EEPROM Electrically Erasable Programmable Read-Only Memory address during a copy operation. This can lead to an out-of-bounds write,...
CVE-2014-6271-IPFire
CVE-2014-6271 Python implementation of CVE-2014-6271: IP Fire =2.15 ShellShock RCE Based on the Metasploit module for the same exploit EDB ID: 34839 Exploit is automatic. See ./CVE-2014-6271.py --help for a full range of switches Warning: The code in this repository may be used for academic/ethic...