1746 matches found
CVE-2025-55182-scanner
RSC Surface & Crash Detector このツールは、露出した React Server Components RSC サーフェスを特定し、以下に関連するクラッシュベースの脆弱性挙動 を検証するために設計された、非侵襲的なセキュリティ検出スクリプトです。 CVE-2025-55182 CVE-2025-66478 これは、防御的なセキュリティテスト、WAF 検証、アプリケーションハードニング のワークフローを対象としています。 このスクリプトはエクスプロイトやコマンド実行は行いません 。厳密に検出と分類のみを実行します。 機能 以下に対する自動スキャン: http://...
CVE-2019-0708
明日は結婚式に出かけるので、もし何も見つからなければ、誰か他の人が引き継いでください。 金曜日に、まだ公開されているものがなければ、クラッシュPoCをここに落とすつもりだ... もしかしたら翌週になるかも。脆弱な数値が一貫して下がるかどうか次第だ。 https://vimeo.com/339425966 これを何に使うかについて私は責任を負いません。教育目的のみに使用すべきです。 server 2003 と win xp と通信するためのソケットは移植しなかったが、やろうと思えば簡単だろう（security exchange PDU を追加して計算すればいい）...
Astra Linux – Vulnerabilities in Firefox, Thunderbird, NSS
After accepting an untrusted certificate, handling an empty PKCS7 sequence as part of the certificate data could have led to a crash. This crash is believed to be exploitable. This vulnerability affects Firefox ESR 91.5, Firefox 96, and Thunderbird 91.5...
Astra Linux – Vulnerability in Mariadb 10.3
MariaDB before 10.7.2 allowed applications to crash because it did not recognize that SELECTLEX::nestlevel is local to each VIEW...
Astra Linux – Vulnerability in Wireshark
In Wireshark versions 3.2.0 to 3.2.2, 3.0.0 to 3.0.9, and 2.6.0 to 2.6.15, the BACapp dissector could crash. This issue was addressed in the epan/dissectors/packet-bacapp.c file by limiting the amount of recursion...
Astra Linux – Vulnerability in qtimageformats-opensource-src
When loading a specially crafted ICNS format image file in QImage, it will cause a crash. This issue affects Qt versions 6.3.0 through 6.5.9, 6.6.0 through 6.8.4, and 6.9.0. This issue has been fixed in versions 6.5.10, 6.8.5, and 6.9.1...
Astra Linux – Vulnerability in yajl
In the yajl-ruby gem version 1.3.0 for Ruby, when a properly crafted JSON file is provided to Yajl::Parser.new.parse, the entire Ruby process crashes with a SIGABRT in the yajlstringdecode function in yajlencode.c. This causes the entire Ruby process to terminate, potentially leading to a denial ...
Astra Linux – Vulnerability in bind9
BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration that uses BIND’s default settings, the vulnerable code path is not exposed. However, a server can become vulnerable by explicitly setting valid values for the...
Astra Linux – Vulnerability in Wireshark
In Wireshark versions 3.2.0 to 3.2.6, 3.0.0 to 3.0.13, and 2.6.0 to 2.6.20, the MIME Multipart dissector could crash. This issue was addressed in the epan/dissectors/packet-multipart.c file by correcting the deallocation of invalid MIME parts...
Astra Linux – Vulnerability in ffmpeg5
A flaw was discovered in FFmpeg’s ALS audio decoder, where it does not properly check for memory allocation failures. This can cause the application to crash when processing certain malformed audio files. While it does not lead to data theft or system control, it can be used to disrupt services a...
Astra Linux – Vulnerability in Apache2
In Apache HTTP Server 2.4.59 and earlier, a null pointer dereference vulnerability in modproxy allows an attacker to crash the server through a malicious request. Users are recommended to upgrade to version 2.4.60, which fixes this issue...
SUSE CVE-2026-76927
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-63138
CMS protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
PT-2026-79141
libvips is a fast image processing library with low memory needs. Prior to version 8.18.3, libvips built without libtiff support but with ImageMagick support can overflow the combined frame height while loading a crafted multi-page TIFF through VipsForeignLoadMagick. The vulnerable calculations i...
CVE-2026-76927
H.245 protocol dissector crash in 4.6.0 to 4.6.7 and 4.4.0 to 4.4.18 allows denial of service...
EUVD-2026-62754
IBM Virtualization Management Interface FW1110.00 through FW1110.30, FW1120.00 through FW1120.00, and FW1060.00 through FW1060.80 is affected by a vulnerability in the Virtualization Management Interface VMI. An attacker with authenticated administrator-level access can cause the VMI to crash. Th...
PT-2026-78840
Name of the Vulnerable Software and Affected Versions Wireshark versions 4.6.0 through 4.6.7 Wireshark versions 4.4.0 through 4.4.18 Description A crash in the C12.22 protocol dissector allows a denial of service. A dissector is a software component that breaks down network traffic into a...
UBUNTU-CVE-2026-71135
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.2.14. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle ...
JLSEC-2026-1262 In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are...
In wxWidgets before 3.2.7, a crash can be triggered in wxWidgets apps when connections are refused in wxWebRequestCURL...
