RHEL 8 : webkit2gtk3 (RHSA-2026:59326)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59326 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

RHEL 8 : webkit2gtk3 (RHSA-2026:59325)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:59325 advisory. WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fixes: Mozilla: Arbitrary JavaScript...

CVE-2026-17113 Cri-o: cri-o: unvalidated image env var causes daemon crash

A flaw was found in CRI-O's container-creation environment-variable handling mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in server/containercreate.go. When a CreateContainer request supplies a nil CRI Envs field, CRI-O falls back to using the target OCI image's...

CVE-2026-16782

Autodesk 3ds Max is affected by an Out-of-Bounds Read vulnerability triggered when parsing a maliciously crafted SVG file . An attacker can exploit this to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process. The vulnerability is rated CVSS 5.3 (Med...

cve-2015-3839_PoC

cve-2015-3839PoC PoC von cve-2015-3839, welches die SMS-App von Android zum Absturz bringen kann DoS Es funktionierte gut auf meinen Testgeräten Nexus 5 Android 4.4.4 und Nexus 5 Android 5.0.1...

google-poc

Para reproduzir o CVE-2025-13425, basta seguir os passos abaixo: Passo 1: Clone o código fonte fresco do osv-scalibr: root@kitploit: $ git clone https://github.com/google/osv-scalibr Passo 2: Remova o código mencionado no commit de correção...

CVE-2026-56684

A flaw was found in Valkey. An authenticated client can trigger a CLIENT KILL command while the tlsProcessPendingData function iterates a pending list. This action causes connTLSClose to delete the iterator's cached next node, leading to a use-after-free vulnerability. This flaw, when Transport...

CVE-2026-76879

A flaw in Wireshark's C12.22 protocol dissector allows remote attackers to trigger a Denial of Service DoS. By sending a specially crafted network packet or capture file, an attacker can crash the application, disrupting network analysis capabilities. Mitigation Avoid analyzing capture files or...

blueborne-CVE-2017-1000251

Linux Kernel 4.13.1 - BlueTooth Buffer Overflow PoC BlueBorne - Prova di concetto - Disarmato/Non armato - Solo DoS Crash Questa è una copia del repository iniziale pubblicato da @marcinguy che successivamente l'ha rimosso e reso privato...

CVE-2021-26690---Apache-mod_session

Patch diffing per CVE-2021-26690 - Apache modsession Questa vulnerabilità è un dereferenziamento di puntatore nullo all'interno del modulo modsession di Apache. Causerà un denial of service per i processi figli di httpd di Apache. Utilizzando un ciclo ripetitivo, ogni worker di Apache si bloccher...

CVE-2026-74643

A flaw was found in the Linux kernel's DAMONSAMPLEMTIER module. A local user can trigger a division-by-zero error in the damosquotascore function by providing zero values for the node0memusedbp or node0memfreebp parameters when enabling the module. This vulnerability leads to a kernel crash,...

CVE-2022-46485

CVE-2022-46485 ngDoS - ngSurvey Notas: A pergunta "slider" também pode ser vulnerável com um número inteiro grande em vez de uma string. Não pôde ser confirmado no meu ambiente local. Passos de exploração Abra a página da pesquisa e encontre um campo de texto ou comentário. Preencha a pesquisa...

BIT-ARGO-CD-2025-55191 Repository Credentials Race Condition Crashes Argo CD Server

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0, 3.1.0 through 3.1.7, and 3.0.0 through 3.0.18 contain a race condition in the repository credentials handler that can cause the Argo CD server to panic and crash when concurrent...

AFLTriage

AFLTriage AFLTriage هي أداة لتصنيف ملفات الإدخال المتسببة في تعطل البرنامج باستخدام مصحح أخطاء. صُممت لتكون محمولة ولا تتطلب أي تبعيات وقت تشغيل، باستثناء libc ومصحح أخطاء خارجي. تدعم تصنيف الأعطال الناتجة عن أي برنامج، وليس فقط AFL، لكنها تتعرف على أدلة AFL بشكل خاص، ومن هنا جاء الاسم. تشمل بعض...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger memory corruption due to improper memory handling, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger a use-after-free due to improper memory management, resulting in an unexpected process crash...

webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash

A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper memory handling, resulting in an unexpected process crash...