47262 matches found
CVE-2021-28476
CVE-2021-28476: Microsoft Hyper-V：vmswitch 中的多个漏洞 在处理 set OID 请求时，WPP 代码中存在多个 bug，其中一个允许解引用（读访问）攻击者控制的指针，其余的导致越界读访问。此仓库包含用于触发已识别问题的概念验证代码。 可在 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2021-001/ 找到问题的完整技术描述。...
CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...
UBUNTU-CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in x...
POC-CVE-2024-12227
CVE-2024-12227 - NTIOLibX64.sys DoS PoC MSI Dragon Center 的 NTIOLibX64.sys 驱动程序中 CVE-2024-12227（空指针解引用漏洞）的概念验证。 描述 NTIOLibX64.sys 版本 3.0.0.10 在 ReadPhysicalMemory 函数（IOCTL 0xC3506104）中存在空指针解引用漏洞。该驱动在调用 MmUnmapIoSpace 之前未检查 MmMapIoSpace 的返回值。如果 MmMapIoSpace 返回 NULL，则使用 NULL 指针调用 MmUnmapIoSpace...
CVE-2025-68325
CVE-2025-68325 schcake no contempla el caso en que cakeenqueue devuelve un resultado no nulo, lo que provoca un desequilibrio de qlen en el árbol de qdisc y desencadena una desreferencia nula en su planificador sched padre, p. ej., qfq. Versiones Afectadas Corregido en v6.19-rc1 Gravedad Baja...
CVE-2021-26690---Apache-mod_session
Diffing de parches para CVE-2021-26690 - Apache modsession Esta vulnerabilidad es una desreferencia de puntero NULL dentro del módulo modsession de Apache. Causará una denegación de servicio para los procesos hijo de httpd de Apache. Mediante un bucle repetitivo, cada uno de los workers de Apache...
google-poc
CVE-2025-13425 を再現するには、以下の手順に従ってください: ステップ1: 最新の osv-scalibr ソースコードをクローンします: root@kitploit: $ git clone https://github.com/google/osv-scalibr ステップ2: 修正コミット https://github.com/google/osv-scalibr/commit/e67c4e198ca099cb7c16957a80f6c5331d90a672 で言及されているコードを削除します ステップ3: vmdk.go.patch パッチを使用し、vmdk.go...
CVE-2026-67184-Unauthenticated-NULL-Pointer-Dereference-Crashes-the-Server-TinyWeb-
安全公告：未经身份验证的 NULL 指针解引用导致服务器崩溃（TinyWeb） 分配的 CVE ID： CVE-2026-67184 摘要 当 TinyWeb 解析请求行失败时，它会返回错误，但请求的 URL 指针仍保持为 NULL。调用方忽略了该错误，并将请求传递给响应构建器，后者解引用了这个 NULL 指针并导致工作进程崩溃。少数格式错误的请求即可使整个服务器宕机，且无法恢复。 受影响软件 项目：TinyWeb https://github.com/GeneralSandman/TinyWeb 构建所报告的版本：TnyWeb/0.0.8...
CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
AZL-99708 CVE-2026-86141 affecting package libxml2 2.11.5-10
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
EUVD-2026-71834
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
CVE-2026-86141
xmlregexp in libxml2 before 2.15.4 has a NULL pointer dereference in xmlRegNewParserCtxt after a strdup failure, i.e., it does not calculate a string length after NULL checking...
CVE-2026-86141
libxml2 versions before 2.15.4 contain a NULL pointer dereference in the xmlregexp module, specifically in the xmlRegNewParserCtxt function. The root cause is a missing string length calculation after a strdup failure and NULL check, leading to a potential crash. The CVSS 3.1 score is 2.9 (Low) w...
EUVD-2026-71790
PX4 Autopilot through 1.17.0 contains a null pointer dereference vulnerability in paramsetdefaultfile and paramsetbackupfile functions that allows attackers to crash the autopilot process. Attackers can invoke 'param select' or 'param select-backup' commands with no path argument from any PX4 she...
SUSE CVE-2026-80813
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix NULL pointer dereference in nvmetexecuteidentifynslist When a host issues an Identify command with CNS 07h Active Namespace ID List for a specific I/O Command Set, nvmetexecuteidentifynslist is called with matchcss set...
SUSE CVE-2026-80846
In the Linux kernel, the following vulnerability has been resolved: xfrm: drop ESP-in-TCP packets with no ingress device ESP-in-TCP receives records through the TCP strparser. handleesp restores skb-dev from the saved skbiif before passing the packet into the XFRM input path. Queued TCP data can ...
SUSE CVE-2026-80912
In the Linux kernel, the following vulnerability has been resolved: selinux: reject an unclaimed class value in securitygetclasses securitygetclasses sizes an array by pclasses.nprim and fills it at value - 1, so a class value the policy never defines leaves a NULL. selmakeclasses passes every...
SUSE CVE-2026-80913
In the Linux kernel, the following vulnerability has been resolved: selinux: require every boolean value to be defined pbools.nprim comes from the policy image independently of how many booleans follow it, and condindexbool fills boolvaltostruct at value - 1, so a count larger than the values...