4154 matches found
CVE-2021-20294-POC
should be exactly the translation, no extra. But careful: the original content has a blank line after each line? We'll preserve structure. CVE-2021-20294-POC 21 يناير 2023، Altin tin-z، github.com/tin-z إثبات المفهوم التحميل والتجميع root@kitploit: wget...
CVE-2023-4863
स्तर 1: craft.c - bad.webp root@kitploit: exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error:...
ALSA-2026:63022 Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/mail: golang: net/mail: Denial of Service via pathological email address parsing CVE-2026-42499 net/mail: golang: Go net/mail: Denial of Service via crafted email inpu...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
kernel: fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath
A flaw was found in the Linux kernel's CIFS Common Internet File System client. When the cifssanitizeprepath function processes specially crafted input, such as an empty string or a string containing only delimiters, it can attempt to read data beyond its allocated memory buffer. This out-of-boun...
practice-22-23
परियोजना चलाने के लिए: ./script.sh गिटहब पर रिपॉजिटरी - https://github.com/LaCinquette/practice-22-23 कार्यान्वयन की प्रक्रिया 1. भेद्यता खोजने के लिए मैंने FFmpeg प्रोजेक्ट चुना। इसमें मुझे एक कमिट मिला जो आवश्यकताओं को पूरा करता था, अर्थात्: CWE-476 प्रकार से मेल खाता था - शून्य पॉइंटर का...
CVE-2026-18024
A flaw was found in PostgreSQL. A buffer over-read vulnerability in the ascii SQL function allows a user to disclose up to 3 bytes of memory after the end of a specific allocation by providing a specially crafted text value. This could lead to limited information disclosure. Mitigation To mitigat...
Exim-CVE-2019-15846
Exim CVE-2019-15846 CVE-2019-15846 का शोषण करने के लिए PoC सामग्री। PoC समझाने वाला ब्लॉगपोस्ट Synacktiv Blog पर उपलब्ध है। यह PoC exim में हीप ओवरफ्लो का शोषण करने के लिए उपयोग किए जाने वाले स्पूल फ़ाइलें उत्पन्न करने में मदद करता है। दो उदाहरण स्पूल फ़ाइलें 1i7Jgy-0002dD-Pb-D और...
CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially cra...
UBUNTU-CVE-2026-84233
A flaw was found in rpm. A local attacker could supply a specially cra...
CVE-2026-84640
A maliciously constructed mail header could lead to a one byte read past the end of a buffer. This vulnerability was fixed in Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...
CVE-2026-73751
An authenticated user with low-privileged access could submit crafted input through the web-based management interface to execute arbitrary commands on the underlying operating system...
CVE-2026-73750 Authenticated Buffer Overflow Vulnerabilities in AOS-CX API Endpoint Leads to Possible Code Execution
Vulnerabilities exist in the authentication module that may improperly process malformed or truncated input. An authenticated remote attacker could exploit these vulnerabilities by providing specially crafted input from a compromised or hostile authentication server. Successful exploitation could...
EUVD-2026-40267
decode-uri-component: Denial of service via exponential decoding of malformed percent-encoded input...
CVE-2026-71514
A flaw was found in NLTK. This path traversal vulnerability in the CrubadanCorpusReader component allows an attacker, who controls a corpus package, to disclose file contents outside the intended corpus directory. This occurs because a specially crafted input can bypass security checks, leading t...
CVE20265172poc
CVE20265172poc CVE-2026-5172: crafted resource record PoC पर extractaddresses में buffer overflow टोपोलॉजी यहाँ पढ़ें https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c चरण 1. vi /etc/dnsmasq.conf port=5353...
Unity Linux 20.1070a Security Update: grafana (UTSA-2026-104992)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104992 advisory. Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input,...
CVE-2026-38638
An issue in the withargv function /unistd/mod.rs of relibc commit 61f42d allows attackers to cause a Denial of Service DoS via a crafted input...