MAD-CAT

MAD-CAT Meow Attack Data Corruption Automation Tool Overview MAD-CAT Meow Attack Data Corruption Automation Tool is a comprehensive security tool designed to simulate data corruption attacks against multiple database systems. The tool supports both single-target attacks and bulk CSV-based attack...

OSEC-2026-20 Cstruct indexing bugs can corrupt filtered output and reverse parsing results

Several functions in cstruct may use wrong data, leading to unexpected exceptions and return corrupted data. Impact - Cstruct.filtermap writes retained bytes at their original input positions, producing corrupted output when earlier bytes are dropped. - Cstruct.tail rev:true removes two bytes...

CVE-2021-22555-Poc

Heap OVerflow CVE CVE-2021-22555 List of Bugs Heap Out-of-Bounds WriteThe core Bug Data Corruption The Immediate Effect Memory Leak / Information Disclosure Privilege Escalation The Final Goal 1. Install compilation tools do NOT run apt upgrade Download iso wget...

PATCH-CVE-2026-31431-Ubuntu_Debian

🛡️ CVE-2026-31431 Copy Fail Mitigation - Linux Kernel This repository contains scripts designed to neutralize the critical vulnerability CVE-2026-31431 , nicknamed "Copy Fail" , on Ubuntu systems. !IMPORTANT Compatibility: These scripts are tailored for and tested on Ubuntu Server 24.04 LTS. While...

EUVD-2026-75091

In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPTRT syzbot is reporting KCOV state corruption on PREEMPTRT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the per-CP...

CVE-2026-80916 kcov: fix data corruption and race conditions on PREEMPT_RT

In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race conditions on PREEMPTRT syzbot is reporting KCOV state corruption on PREEMPTRT kernels, for the temporary storage used for saving/restoring remote KCOV state is currently allocated as the per-CP...

CVE-2026-80916

CVE-2026-80916 affects the Linux kernel KCOV subsystem on PREEMPT_RT builds. The root cause is that temporary storage for saving/restoring remote KCOV state was allocated in the per-CPU area ; when a softirq thread preempts a task running a remote KCOV session and is itself preempted by a higher-...

CVE-2026-87825

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

EUVD-2026-75023

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

CVE-2026-87825 zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries

zstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load call, allowing the dictionary to be closed while still referenced. Attackers can close a dictionary after associating it with a stream or context, causi...

CVE-2026-53788

A newline injection vulnerability exists in rsync's uid/gid mapping process. An attacker can inject newline characters into user or group names, causing the rsync daemon to process attacker-controlled data as legitimate protocol input. This results in data corruption within the uid/gid mapping...

CVE-2026-86143

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

CVE-2024-36971

CVE-2024-36971 — Proof of Concept Research & Analysis Only ⚠️ DISCLAIMER — READ BEFORE USING THIS REPOSITORY This repository is intended only for defensive research, analysis, and responsible reporting. It contains a non-exploitable proof of concept file named CVE-2024-36971 and a publicly...

libxml2: libxml2: Data integrity issues due to integer overflow in write callbacks

An integer overflow in the libxml2 xmlIO module occurs when data backlogs exceed maximum integer limits. This flaw passes negative length values to downstream write callbacks, creating an unsafe state that can lead to data corruption or compromise application confidentiality and integrity...

libevent: Libevent: Off-by-one stack buffer overflow leading to denial of service or data corruption

A flaw was found in Libevent, an event notification library. An off-by-one stack buffer overflow exists in the dnsnametolabels function when processing a name-bearing DNS record. A remote attacker could send a specially crafted DNS server response, which may lead to a crash or corruption of the...

CVE-2026-84963

CVE-2026-84963 affects the JSON-to-BSON parser in the MongoDB C Driver's BSON library . The root cause is an unchecked int cast of huge JSON string values, causing an incorrect numeric conversion that silently shortens unusually large text values or omits the corresponding field entirely—while th...

Linux Distros Unpatched Vulnerability : CVE-2026-55858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector...

CVE-2026-55858

A flaw was found in MariaDB Connector/J, a component used to connect Java applications to MariaDB and MySQL databases. The connector incorrectly assumes a UTF-8 character set for communication, even if the database server changes its client character set to a non-UTF-8 value during a session. Thi...

CVE-2026-81727

A flaw was found in NLTK. This vulnerability, a filesystem containment bypass, allows a local attacker with write access to a shared downloader directory to create special links hardlinks that point to files outside the intended installation area. When a package is extracted, these hardlinks can...

CVE-2026-82737 Ash.Vector wraps the 16-bit dimension header for vectors over 65,535 elements, corrupting data and crashing reads

Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker corrupt a stored vector and crash later reads of it by submitting a vector with more than 65,535 elements. Ash.Vector.new/1 lib/ash/vector.ex encodes a vector as followed by the element floats, packing the element...