4480 matches found
CVE-2023-4863
level 1: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No su...
CVE20265172poc
CVE20265172poc CVE-2026-5172: buffer overflow in extractaddresses on crafted resource record PoC Topology read here https://medium.com/@yanyuyingshu/reproduction-journal-dnsmasq-ecs-validation-and-buffer-overflow-flaws-e0fe0f66f60c Steps 1. vi /etc/dnsmasq.conf port=5353...
Exim-CVE-2019-15846
Exim CVE-2019-15846 PoC materials to exploit CVE-2019-15846. Blogpost explaining the PoC is available on Synacktiv Blog. This PoC help generate spool files used exploit a heap overflow in exim. Two example spool files are given in 1i7Jgy-0002dD-Pb-D and 1i7Jgy-0002dD-Pb-H. A specialy crafted spoo...
CVE-2021-20294-POC
CVE-2021-20294-POC Jan 21 2023, Altin tin-z, github.com/tin-z Poc download and compile wget https://ftp.gnu.org/gnu/binutils/binutils-2.35.tar.gz && tar -xzvf binutils-2.35.tar.gz cd binutils-2.35 && ./configure && make && cd .. gcc -shared -fPIC poc.c -o poc.so -Wl,--version-script=poc.ver launc...
practice-22-23
Project To run: ./script.sh GitHub repository - https://github.com/LaCinquette/practice-22-23 Progress 1. For vulnerability research I chose the FFmpeg project. I found a commit that met the requirements, namely: Matched the type CWE-476 - null pointer dereference 2. Created a Dockerfile in which...
CLEANSTART-2026-ST75675 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input...
CLEANSTART-2026-LQ61201 flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input...
CVE-2026-106971
An integer overflow vulnerability exists in the MessagePack\BufferUnpacker component of the rybakit/msgpack library (versions prior to 0.11.0 ). This flaw allows an attacker to trigger a denial of service (DoS) by providing specially crafted MessagePack input when the application is running on 32...
CVE-2026-106971
An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CLEANSTART-2026-QL11763 flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input...
Ubuntu 26.04 LTS / 26.10 : Perl XS::Parse::Keyword module vulnerability (USN-8940-1)
The remote Ubuntu 26.04 LTS / 26.10 host has a package installed that is affected by a vulnerability as referenced in the USN-8940-1 advisory. It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receivi...
USN-8940-1 libxs-parse-keyword-perl vulnerability
It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service...
USN-8940-1: Perl XS::Parse::Keyword module vulnerability
It was discovered that the Perl XS::Parse::Keyword module did not correctly handle certain inputs. If a user or automated system were tricked into receiving specially crafted input, an attacker could cause a denial of service...
Astra Linux – vulnerability in Imagemagick
A flaw was found in ImageMagick’s MagickCore/quantum.h. An attacker submitting a specially crafted file for processing by ImageMagick could trigger undefined behavior, resulting in values outside the range of unsigned char. This would most likely affect application availability; however, it could...
Astra Linux – vulnerability in Imagemagick
In CatromWeights, MeshInterpolate, InterpolatePixelChannel, InterpolatePixelChannels, and InterpolatePixelInfo, all functions located in /MagickCore/pixel.c, there were multiple unconstrained pixel offset calculations that were utilized alongside the floor function. These calculations resulted in...
Astra Linux – Vulnerability found in Linux 5.15, Linux 5.10
In the Linux kernel, the following vulnerability has been resolved: erofs: The issue of generating a order = MAXORDER warning due to an intentionally crafted negative isize has been fixed. As reported by syzbot 1, the root cause is that the isize field is a signed type, and a negative isize value...
Astra Linux – Vulnerability in openjpeg2
A flaw was discovered in OpenJPEG’s encoder. This flaw allows an attacker to provide specially crafted x,y offset inputs to OpenJPEG during encoding. The greatest threat of this vulnerability is to confidentiality, integrity, and system availability...
Astra Linux – Vulnerability in openjpeg2
There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...
Astra Linux – Vulnerability in libxstream-java
XStream is a simple library for serializing objects to XML and back again. In affected versions, this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host by manipulating the processed input stream, if the library is used in versions outside the box with...
Astra Linux – vulnerability in binutils
There is a flaw in bfdpefscanstartaddress within bfd/pef.c in binutils; it may allow an attacker capable of submitting a specially crafted file to have it processed by objdump, resulting in a NULL pointer dereference. The primary risk posed by this flaw is application availability. It affects...