Lucene search
+L

981 matches found

Kitploit
Kitploit
added 2026/09/12 1:29 a.m.9 views

writeup_split

Abstract CVE-2024-0684 GNU coreutils "split" 프로그램의 취약점으로 인해 사용자 제어 데이터로 힙 버퍼 오버플로우가 발생할 수 있습니다. 해당 취약점은 40bf1591bb4362fa91e501bcec7c2029c5f65a43 커밋에서 2023년 3월 4일에 도입되었습니다. 수정 사항은 c4c5ed8f4e9cd55a12966d4f520e3a13101637d9 커밋에서 2024년 1월 17일에 릴리스되었습니다. 영향을 받는 버전: GNU coreutils v9.4; v9.3; v9.2 개념 증명:...

5.5CVSS6.1AI score0.0049EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/09/11 1:24 p.m.8 views

CVE-2026-86321

A flaw was found in jackson-coreutils. This server-side request forgery SSRF vulnerability occurs when applications use the JsonLoader.fromURL function with untrusted input. A remote attacker can exploit this to induce the server to make arbitrary requests. This could lead to unauthorized...

6.9CVSS0.00384EPSS
SaveExploits0References9
OSV
OSV
added 2026/09/11 12:05 p.m.6 views

RLSA-2026:66403 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

4.4CVSS0.00146EPSS
SaveExploits0References3
Rockylinux
Rockylinux
added 2026/09/11 12:05 p.m.8 views

coreutils security update

An update is available for coreutils. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

6.1CVSS0.00146EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.5 views

AlmaLinux 9 : coreutils (ALSA-2026:66403)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:66403 advisory. coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 Tenable has extracted the preceding description block directly fro...

6.1CVSS0.00146EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/09/11 12:00 a.m.5 views

Oracle Linux 9 : ELSA-2026-66403-0: / coreutils (ELSA-2026-664030)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-664030 advisory. 8.32-41.0.1.el98.1 - clean up empty file if cp is failed Orabug 15973168 8.32-41.1 - unexpand: fix CVE-2026-56392 and related crashes RHEL-216788 - fix...

6.1CVSS0.00146EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/10 2:36 p.m.6 views

Moderate: Red Hat Security Advisory: coreutils security update

An update for coreutils is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

6.1CVSS0.00146EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2026/09/10 2:36 p.m.5 views

coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values

A flaw was found in GNU coreutils, specifically in the unexpand utility. This vulnerability, a heap-based buffer overflow, occurs due to an integer overflow when unexpand processes unusually large tab stop values provided by a local attacker. This can lead to an undersized memory buffer, allowing...

6.1CVSS0.00146EPSS
SaveExploits0References7
AlmaLinux
AlmaLinux
added 2026/09/10 12:00 a.m.6 views

Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

6.1CVSS0.00146EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2026/09/10 12:00 a.m.6 views

coreutils security update

8.32-41.0.1.el98.1 - clean up empty file if cp is failed Orabug 15973168 8.32-41.1 - unexpand: fix CVE-2026-56392 and related crashes RHEL-216788 - fix direct.sh and unexpand/mb.sh tests - fix heap overflow with large tab stops - fix heap overflow when a wide blank overshoots a tab stop...

6.1CVSS0.00146EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/09/10 12:00 a.m.7 views

RHEL 9 : coreutils (RHSA-2026:66403)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66403 advisory. The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils...

6.1CVSS0.00146EPSS
SaveExploits0References5
OSV
OSV
added 2026/09/10 12:00 a.m.6 views

ALSA-2026:66403 Moderate: coreutils security update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Security Fixes: coreutils: GNU coreutils unexpand: Denial of Service via crafted tab stop values CVE-2026-56392 For more details about the...

6.1CVSS0.00146EPSS
SaveExploits0References4
NVD
NVD
added 2026/09/08 3:17 a.m.6 views

CVE-2026-86513

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS0.00405EPSS
SaveExploits0References6
NVD
NVD
added 2026/09/08 3:17 a.m.7 views

CVE-2026-86511

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

6.9CVSS0.00405EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/09/08 2:30 a.m.10 views

EUVD-2026-72614

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS0.00405EPSS
SaveExploits0References6
CVE
CVE
added 2026/09/08 2:30 a.m.16 views

CVE-2026-86513

A remote, unauthenticated resource allocation vulnerability exists in the JSON Pointer parser component of java-json-tools jackson-coreutils 2.0 , specifically in the TreePointer.tokensFromInput function within TreePointer.java. The flaw can be triggered remotely without authentication, resulting...

6.9CVSS0.00405EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/09/08 2:30 a.m.26 views

CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS0.00405EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/08 2:30 a.m.6 views

CVE-2026-86513 java-json-tools jackson-coreutils JSON Pointer parser TreePointer.java TreePointer.tokensFromInput allocation of resources

A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. This vulnerability affects the function TreePointer.tokensFromInput of the file src/main/java/com/github/fge/jackson/jsonpointer/TreePointer.java of the component JSON Pointer parser. The manipulation results in...

6.9CVSS5.3AI score
SaveExploits0References8
EUVD
EUVD
added 2026/09/08 2:00 a.m.9 views

EUVD-2026-72617

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

6.9CVSS0.00405EPSS
SaveExploits0References6
OSV
OSV
added 2026/09/08 2:00 a.m.8 views

CVE-2026-86511 java-json-tools jackson-coreutils JacksonUtils.java BigDecimal.toPlainString resource consumption

A vulnerability was found in java-json-tools jackson-coreutils 2.0. Affected by this vulnerability is the function BigDecimal.toPlainString of the file src/main/java/com/github/fge/jackson/JacksonUtils.java. Performing a manipulation results in resource consumption. The attack may be initiated...

6.9CVSS5.4AI score
SaveExploits0References8
Rows per page
Query Builder