235 matches found
CVE-2026-41089-Netlogon-RCE
🚨 CVE-2026-41089: 重大な Windows Netlogon RCE Active Directory ドメインコントローラにおける未認証のリモートコード実行 🧠 概念概要 私は、Windows Netlogon サービスの深部に存在する極めて重大な脆弱性である CVE-2026-41089 の技術的詳細分析を公開します。私の分析によると、この欠陥は深刻な スタックベースのバッファオーバーフロー...
CVE-2025-69720
CVE-2025-69720: ncurses infocmp -i 栈缓冲区溢出 CWE-121 报告人:Yixuan Cao 深圳大学,[email protected] 环境 主机:openEuler 22.03 LTS Linux aarch64 工具链:系统 clang 12.0.1 + AddressSanitizer 源代码:ncurses-6.4 和 ncurses-6.5(在补丁 20251213 之前) 摘要 infocmp -i 调用 analyzestring progs/infocmp.c 来检查 terminfo 条目中的 CSI...
CVE-2025-60751
CVE-2025-60751: GeographicLib 基于栈的缓冲区溢出 📌 本仓库包含漏洞 CVE-2025-60751 的分析和技术文档,这是一个位于 C++ 库 GeographicLib 中的基于栈的缓冲区溢出 漏洞。 📝 描述 该漏洞存在于 GeoConvert 组件中的 DMS::InternalDecode 函数内。 当库尝试处理格式错误或过长的 DMS (度、分、秒)坐标字符串时,会导致超出栈上分配缓冲区边界的写入 。 标识符 :CVE-2025-60751 组件 :GeoConvert / DMS::InternalDecode 类型 :基于栈的缓冲区溢出...
Security Bulletin: This Power System update is being released to address CVE-2026-19234
Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...
CVE-2026-63387
libevent <2.1.13 and
OESA-2026-3415 gimp security update
The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...
GHSA-VV88-699V-W5RH vulnerabilities
Vulnerabilities for packages: wget...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
MINI-64C5-5HH7-P3WF
Bulletin has no description...
MINI-HH33-XF2Q-6G54
Bulletin has no description...
MINI-MPVJ-W82C-X9MC
Bulletin has no description...
CVE-2026-58082
This stack buffer overflow in FreeBSD's iconv(3) ISO-2022 encoding module occurs because an intermediate buffer is sized to MB_LEN_MAX (6 bytes) , while some ISO-2022 variants require up to 10 bytes per character , allowing overflow of up to four bytes. Any application using iconv(3) to convert u...
MINI-R26W-8CPC-F636
Bulletin has no description...
CVE-2026-42946 vulnerabilities
Vulnerabilities for packages: nginx-mainline, nginx-stable...
MINI-GFXM-Q3V3-339V
Bulletin has no description...
MINI-QQ64-9896-896F
Bulletin has no description...
MINI-JWCG-FXW6-J63J
Bulletin has no description...