1270 matches found
CVE-2018-3639-specter-v4-
CVE-2018-3639-specter-v4 spectre v4 : Prueba de concepto de Speculative Store Bypass CVE-2018-3639 para Linux compilar: gcc spectre-v4.cpp -o spectre ejecutar: ./spectre resultado: --------attack-------- low than threshold:155 low than threshold:144 low than threshold:133 low than threshold:0 low...
cisco-rce
CVE-2017-3881 Cisco IOS远程代码执行 此仓库包含用于利用远程代码执行漏洞的概念验证代码，该漏洞由思科系统于2017年3月17日披露 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp 描述 漏洞利用分析文章可在此处获取 - https://artkond.com/2017/04/10/cisco-catalyst-remote-code-execution/ RCE利用代码适用于Cisco Catalyst...
Important: Red Hat Security Advisory: rsyslog security update
An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
cve-2021-41773
CVE-2021-41773 – Apache 路径遍历报告 摘要 Apache HTTP Server 2.4.49 版本中发现的漏洞，根据 Web 服务器配置，可通过路径遍历攻击暴露系统敏感文件 路径遍历：攻击者可通过包含 ../ 的路径访问 Web 根目录之外的文件 信息 漏洞名称 ：CVE-2021-41773 受影响版本 ：Apache HTTP Server 2.4.49 漏洞类型 ：路径遍历 官方补丁情况 ：已在 2.4.50 及以上版本修补 实验环境配置 基础镜像：httpd:2.4.49（DockerHub） 容器运行方式：Dockerfile +...
PoC-CVE-2017-3881
PoC-CVE-2017-3881 Cisco Catalyst Remote Code Execution PoC This repository contains Proof-Of-Concept code for exploiting remote code execution vulnerability disclosed by Cisco Systems on March 17th 2017 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170317-cmp...
CVE-2017-3881
CVE-2017-3881 Ejecución remota de código en Cisco IOS Este repositorio contiene código de Prueba de Concepto para explotar la vulnerabilidad de ejecución remota de código divulgada por Cisco Systems el 17 de marzo de 2017 -...
cve-2022-42475
cve-2022-42475 POC code to exploit the Heap overflow in Fortinet's SSLVPN daemon Notes This is a quick and dirty POC that will probably not work anywhere unless you are extremely lucky. It is version dependent and contains some hardcoded offsets which will most likely change from one system to...
Linux Distros Unpatched Vulnerability : CVE-2026-74742
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - veth: fix queue index used to wake the peer txq in vethpoll vethpoll derives the index of the peer TX queue to wake from rq-xdprxq.queueindex. That field is onl...
EUVD-2026-63981
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...
CVE-2026-48754
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...
CVE-2026-48754 Incus: Nil-pointer dereference in createDependentVolumesFromBackup on disk.{Volume,VolumeSnapshots,Pool}
Incus is a system container and virtual machine manager. Prior to version 7.1.0, backend.createDependentVolumesFromBackup in internal/server/storage/backend.go contains a cluster of unguarded pointer derefs on every dependent-volume entry's VolumeSnapshotsi, Volume, and Pool sub-fields. An...
@cbsanal/node-red-opcua-browse-subscribe (>=0.0.1, <=0.0.4), @frangoteam/fuxa (>=1.1.7, <=1.3.1) +46 more potentially affected by CVE-2026-54155 via node-opcua (>=2.1.9, <=2.164.2)
node-opcua NPM version =2.1.9, =0.0.1, =1.1.7, =1.1.19, =1.3.2-alpha.86, =1.4.15-alpha.218, =1.4.15-alpha.66, =1.4.15-alpha.183, =1.4.15-alpha.61, =1.3.6-alpha.36, =1.4.15-alpha.159, =1.3.5, =1.4.15-alpha.197, =1.4.15-alpha.279, =1.4.15-alpha.182, =1.4.15-alpha.196 and more Source cves:...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +289 more potentially affected by CVE-2026-47698 via vm2 (>=3.0.0, <=3.11.5)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...
OSEC-2026-17 Timing leak in NIST elliptic curves scalar multiplication
The scalar multiplication includes pre-computed tables for speedup introduced in mirage-crypto-ec 0.11.3. The lookup algorithm for these tables performs secret-dependent reads instead of scanning the entire table. Solution Instead of using the index n - 1, where n is secret-dependent, use i - 1, ...
CVE-2026-45809
OpenSIPS is a Session Initiation Protocol SIP server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerability in the watcherinfo generation functionality. An attacker can create an oversized watcher entry by sending a SUBSCRIBE Event: presence request with a...
CVE-2026-12816
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
UBUNTU-CVE-2026-12816
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...
CVE-2026-12816 IESEngine stream-mode MAC forgery via length-dependent KDF split
In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forgery via length-dependent KDF split. This issue also affects Bouncy Castle for Java LTS before 2.73.12...