CVE-2026-80528

A flaw was found in the Linux kernel's Ceph filesystem. When the kernel handles replies and fills inode and dentry caches, a memory allocation can trigger a memory reclamation process. This process can incorrectly interpret Ceph-specific data as a journal handle if it interacts with another...

CVE-2026-79769

A flaw was found in Nokogiri. This vulnerability involves a possible invalid memory read in the internal Nodeinitializecopywithargs helper. If application code calls this protected method with an incorrect argument type, such as a non-Node object, it can lead to an out-of-bounds read, causing the...

cve-2026-45185-detection-script

CVE-2026-45185 Erkennungsskripte c SECPlayground Platform —https://www.secplayground.com Diese Erkennungsskripte sind Eigentum der SECPlayground Platform. Zwei sichere Erkennungsskripte. Keines davon löst den closenotify-mid-BDAT-Trigger aus, sodass sie den Daemon nicht abstürzen lassen oder...

CVE-2026-42931

A flaw was found in Gitea. An authenticated attacker can trigger a denial of service by sending a large HTTP request to the NPM package tag API endpoint. The server attempts to read the entire request body into memory without a size limit, leading to an Out-of-Memory OOM error and crashing the...

USN-8685-1 bzip2 vulnerability

It was discovered that bzip2 did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a crash, resulting in a denial of service...

CVE-2026-23918-Apache-H2-PoC

CVE-2026-23918-Apache-H2-PoC Questo è un proof-of-concept per la vulnerabilità di double-free nel modulo modhttp2 di Apache CVE-2026-23918. È un bug subdolo che colpisce il percorso di pulizia dello stream in h2mplx.c. In pratica, se si sincronizza bene il timing, si può indurre il server a tenta...

CVE-2026-74750

A flaw was found in the Linux kernel's ovpn module. This vulnerability arises from an incorrect handling of cryptographic resource freeing, where a function that requires the ability to pause sleep is executed in a context that does not allow it. This improper resource management could lead to...

CVE-2021-30955-POC

CVE-2021-30955 POC Prova di concetto confezionata in un'app iOS per CVE-2021-30955 Tutto il merito va a Jake James. Il suo codice POC usato in questo progetto può essere trovato qui. Cos'è? Questo dimostra CVE-2021-30955, un bug iOS che consente a un'app nello spazio utente di ottenere permessi a...

CVE-2026-80541

A flaw was found in the Linux kernel's drm/amdgpu component. A local user could exploit improper validation of Graphics Execution Manager GEM CREATE domain combinations. By combining specific memory domains CPU|GTT|VRAM with special hardware domains DOORBELL, GDS, GWS, or OA, a user could trigger...

EUVD-2026-66474

In the Linux kernel, the following vulnerability has been resolved: Input: sur40 - fix input device registration ordering In sur40probe, inputregisterdevice was previously called early before the V4L2 video device and vb2queue components were fully initialized. If userspace opened the input devic...

EUVD-2026-66588

In the Linux kernel, the following vulnerability has been resolved: crypto: tegra - fix rctx-cryptlen calculation in tegragcmdoonereq Perform rctx-cryptlen calculation in tegragcmdoonereq the same way it is done in tegraccmcryptinit. The current formulae may lead to a crash if a caller does not...

EUVD-2026-66594

In the Linux kernel, the following vulnerability has been resolved: ceph: avoid fs reclaim while using current-journalinfo handlereply stores a cephmdsrequest pointer in current-journalinfo while filling the inode and dentry cache from an MDS reply. An allocation in this section can enter direct...

EUVD-2026-66567

In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw-nuss: Fix portid extraction from SRC TAG On the packet reception path, the ID of the MAC Port on which the packet was received, is embedded in the RX DMA Descriptor's metadata. The ID is extracted usi...

CVE-2026-42945

CVE-2026-42945 PoCGo चीनी | English nginx HTTP/2 कार्यान्वयन CVE-2026-42945 के लिए जांच एवं उपयोग सहायक उपकरण, जिसका उपयोग अधिकृत वातावरण में भेद्यता की उपस्थिति सत्यापित करने, सुधार प्रभाव की तुलना करने, और नियंत्रित प्रायोगिक वातावरण में PoC व्यवहार को पुनः उत्पन्न करने के लिए किया जाता है।...

CVE-2025-43541

CVE-2025-43541 ATTENZIONE: CODICE POTENZIALMENTE PERICOLOSO Questo repository contiene un Proof of Concept PoC in JavaScript/HTML relativo a una potenziale vulnerabilità in WebKit/JavaScriptCore identificata come CVE-2025-43541. Dichiarazione di responsabilità Questo codice potrebbe essere...

ufuzz

UFuzz, oder Universal Plug and Fuzz, ist ein automatisches UPnP-Fuzzing-Tool. Es listet alle UPnP-Endpunkte im Netzwerk auf, findet die verfügbaren Dienste und fuzzt diese. Es besitzt außerdem die Fähigkeit, HTTP mithilfe von Burp-Proxy-Logs zu fuzzen. Es ist dafür ausgelegt, eingebettete Systeme...

EUVD-2026-66826

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

CVE-2026-31280-Insecure-Bluetooth-RFCOMM-Leading-to-Device-Crash-in-Parani-M10-Intercom

CVE-2026-31280-Bluetooth-RFCOMM-non-sicuro-che-porta-al-crash-del-dispositivo-in-Parani-M10-Intercom Un servizio Bluetooth Classic RFCOMM del Parani M10 Intercom è esposto senza applicare un'autenticazione sicura o un adeguato controllo degli accessi. Una volta nel raggio d'azione, qualsiasi...

CVE-2026-47860

An attacker who can publish to a queue consumed by an application that has enabled message decompression can crash the consumer JVM with a single 1 MB message. Spring AMQP 4.1.0 Spring AMQP 4.0.0 - 4.0.4 Spring AMQP 3.2.0 - 3.2.12 Spring AMQP 2.4.18 and earlier...

UBUNTU-CVE-2026-80525

In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF: ipc4-topology: Refresh copier IPC payload before widget setup The ipcconfigdata buffer for copier widgets is built once during ipcprepare called from sofpcmsetupconnectedwidgets and cached for reuse. For host copiers...