silifuzz

SiliFuzz - Fuzzing CPUs by proxy What is SiliFuzz SiliFuzz is a system that finds CPU defects by fuzzing software proxies, like CPU simulators or disassemblers, and then executing the accumulated test inputs known as the corpus on actual CPUs on a large scale. SiliFuzz is a work in progress, plea...

CVE-2016-9793

CVE-2016-9793...

ssh-audit

ssh-audit ssh-audit is a tool for ssh server & client configuration auditing. jtesta/ssh-audit v2.0+ is the updated and maintained version of ssh-audit forked from arthepsy/ssh-audit v1.x due to inactivity. Features Usage Screenshots Server Standard Audit Example Server Policy Audit Example Clien...

CVE-2022-24934

CVE-2022-24934 CVE-2022-24934...

GHSA-J4M9-6W36-PW47 Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph. If FTLoadGlyph fails for a glyph, the cleanup path calls FTDoneGlyph on the glyph variable. That variable is not initialized before the first measurement loop, and in the render...

Pillow: Invalid free in FreeType glyph rendering when a stroker is active

Summary When text is drawn with a non-zero stroke width, Pillow creates a FreeType stroker and then loads each glyph. If FTLoadGlyph fails for a glyph, the cleanup path calls FTDoneGlyph on the glyph variable. That variable is not initialized before the first measurement loop, and in the render...

EUVD-2026-96042

ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface...

CVE-2026-108501 Unauthorized access vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra has a system interface permission verification defect. The interface lacks necessary access control, and relevant information can be read by reflectively invoking the interface...

GHSA-5974-GFQC-WRCM Contao: Improper access control in the table access voter

Due to a caching defect in the security voter that governs table-level access to Contao's Data Container DCA backend, a low-privileged, non-admin backend user can obtain unauthorized read, create, update, and delete access to database tables outside their assigned module permissions. This include...

ROOT-OS-UBUNTU-2204-CVE-2025-39958 CVE-2025-39958 in linux - Patched by Root

Root has patched CVE-2025-39958 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

PT-2026-109308

Name of the Vulnerable Software and Affected Versions Contao versions 5.7.0 through 5.7.11 Description A caching defect in the security voter governing table-level access to the Data Container DCA backend allows a low-privileged, non-admin backend user to obtain unauthorized read, create, update,...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: sfc: Fixed an issue where a use-after-free occurred when disabling sriov. The use-after-free was detected by kfence when disabling sriov. What was read after it was freed was vf-pcidev: it was freed from pcidisablesriov, and...

CVE-2022-0543

CVE-2022-0543 - Redis Lua サンドボックスエスケープによるリモートコード実行 Debian/Ubuntu CVE-2022-0543 は、DebianベースのLinuxディストリビューション （DebianやUbuntuを含む）上のRedisに影響を与える重大なセキュリティ脆弱性です。この脆弱性はパッケージングの欠陥に起因し、Luaサンドボックスエスケープ を引き起こします。その結果、影響を受けるシステム上でリモートコード実行（RCE）が可能になります。 アップストリームのRedis自体は脆弱ではありません —...

PT-2026-102340

Name of the Vulnerable Software and Affected Versions DOMSanitizer versions prior to 1.0.15 Description An incomplete input-validation defect exists in the isDangerousUrl function, which is used to reject dangerous URL values in the href and xlink:href attributes. While the javascript: scheme is...

Where the Numbers Come From: Auditing Evaluation in Provenance-Based Intrusion Detection

Reproducing a provenance-based intrusion detector's score does not establish what that score says about its emitted alarms or the information its encoder uses. We audit nine released implementations, execute four detectors using their own code, and isolate three measurement effects. First, a...

firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2 and Firefox ESR 140.15

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 154, Firefox ESR 153.1 and Firefox ESR 140.14. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume...

ROS-20260922-73-0043

The vulnerability in Grafana is related to defects in the authentication process. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-84142

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird 154. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we presume that with enough effo...

CVE-2026-84144

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Thunderbird 154 and Thunderbird ESR 153.1. Some of these bugs showed evidence of memory corruption or another security-relevant defect and we...

firefox: Internally found bugs fixed in Firefox 155, Firefox ESR 153.2, Firefox ESR 140.15 and Firefox ESR 115.40

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Internally found bugs present in Firefox 154, Firefox ESR 153.1, Firefox ESR 140.14 and Firefox ESR 115.39. Some of these bugs showed evidence of memory corruption or another security-relevant...