248 matches found
CVE-2026-41089-Netlogon-RCE
🚨 CVE-2026-41089：Windows Netlogon 严重远程代码执行漏洞 在 Active Directory 域控制器上实现未认证远程代码执行 🧠 概念概述 我正在发布对 CVE-2026-41089 的技术剖析，这是一个深藏于 Windows Netlogon 服务内部的极其严重的漏洞。我的分析表明，该缺陷根源于一个严重的基于栈的缓冲区溢出 （CWE-121）。通过向存在漏洞的域控制器发送经特殊构造的畸形网络请求，未认证攻击者即可引发内存破坏，并在系统级无缝执行任意代码。 🎯 核心影响理念 “掌控 Netlogon 者，即掌控整个王国。” 由于该漏洞无需任何用户交互...
Security Bulletin: Vulnerabilities exists in IBM Netezza Appliance
Summary Vulnerabilities identified in IBM Netezza Appliance have been addressed in version 1.0.2.0 Vulnerability Details CVEID:CVE-2026-30892 DESCRIPTION: crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u --user is incorrectly...
CVE-2025-60751
CVE-2025-60751: GeographicLib 基于栈的缓冲区溢出 📌 本仓库包含漏洞 CVE-2025-60751 的分析和技术文档，这是一个位于 C++ 库 GeographicLib 中的基于栈的缓冲区溢出 漏洞。 📝 描述 该漏洞存在于 GeoConvert 组件中的 DMS::InternalDecode 函数内。 当库尝试处理格式错误或过长的 DMS （度、分、秒）坐标字符串时，会导致超出栈上分配缓冲区边界的写入 。 标识符 ：CVE-2025-60751 组件 ：GeoConvert / DMS::InternalDecode 类型 ：基于栈的缓冲区溢出...
CVE-2025-69720
CVE-2025-69720: ncurses infocmp -i 栈缓冲区溢出 CWE-121 报告人：Yixuan Cao 深圳大学，[email protected] 环境 主机：openEuler 22.03 LTS Linux aarch64 工具链：系统 clang 12.0.1 + AddressSanitizer 源代码：ncurses-6.4 和 ncurses-6.5（在补丁 20251213 之前） 摘要 infocmp -i 调用 analyzestring progs/infocmp.c 来检查 terminfo 条目中的 CSI...
Security Bulletin: This Power System update is being released to address CVE-2026-19234
Summary Power Systems Firmware is affected by a vulnerability in the host firmware boot process image validation path. An attacker with service access to the service processor can supply a maliciously crafted code update image, allowing arbitrary code to be executed on the host system. Successful...
CVE-2026-63387
libevent <2.1.13 and
OESA-2026-3415 gimp security update
The GIMP is an image composition and editing program, which can be used for creating logos and other graphics for Web pages. The GIMP offers many tools and filters, and provides a large image manipulation toolbox, including channel operations and layers, effects, subpixel imaging and antialiasing...
GHSA-VV88-699V-W5RH vulnerabilities
Vulnerabilities for packages: wget...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
MINI-64C5-5HH7-P3WF
Bulletin has no description...
MINI-HH33-XF2Q-6G54
Bulletin has no description...
MINI-MPVJ-W82C-X9MC
Bulletin has no description...
CVE-2026-58082
A stack-based buffer overflow exists in the iconv(3) library's ISO-2022 encoding module on FreeBSD . The module uses a stack buffer sized to MB_LEN_MAX (6 bytes) for intermediate character output, but certain ISO-2022 variants require up to 10 bytes per character, triggering a potential overflow ...
The vulnerabilities of the functions set_wl_guest_iplist() and fromSetWifiGusetBasic() in the microprogramming software for the Tenda AC12 router, file US_AC1206V1.0RTL_V15.03.06.23_multi_TD01.bin, allow a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerabilities of the functions setwlguestiplist and fromSetWifiGusetBasic of the Tenda AC12 router are related to the occurrence of operations outside the buffer in memory. Exploiting these vulnerabilities could allow a remote attacker to compromise the confidentiality, integrity, and...
MINI-R26W-8CPC-F636
Bulletin has no description...
MINI-98P4-3HM7-FRJM
Bulletin has no description...
CVE-2026-42946 vulnerabilities
Vulnerabilities for packages: nginx-stable, nginx-mainline...