CVE-2002-0200

CVE-2002-0200 Cyberstop Web Server for Windows 0.1 允许远程攻击者通过发送一个 HTTP 请求使用 MS-DOS 设备名称导致拒绝服务。 外部参考：https://marc.info/?l=bugtraq&m=101174569103289&w=2 作者 Alex Hernandez 又名 @alt3kx...

cve-2023-40429-ez-device-name

HostName 概述 HostName 是一个示例应用，演示了第三方应用如何在没有 com.apple.developer.device-information.user-assigned-device-name 授权的情况下访问用户的设备名称。 详细信息 在 iOS 16 中，Apple 添加了 com.apple.developer.device-information.user-assigned-device-name 授权，以防止第三方应用通过设备名称对用户进行指纹识别。然而，ProcessInfo.processInfo.hostName API 在此过程中出现了问题，该 A...

CVE-2026-27199-werkzeug-safe-join-bypass-PoC

PoC CVE-2026-27199: Bypass de safejoin de Werkzeug mediante nombres de dispositivo de Windows Estado: Divulgado públicamente. Corregido en werkzeug 3.1.6. Gravedad: Moderada Reportero: @alimezar Aviso: GHSA-29vq-49wr-vm6x Versiones afectadas Paquete| Afectado| Parcheado ---|---|--- werkzeug|...

CVE-2024-43363

CVE-2024-43363 Script de explotación de CVE-2024-43363 Este script de Python está diseñado para probar si una instancia de Cacti es vulnerable a CVE-2024-43363, una vulnerabilidad de ejecución remota de código RCE causada por envenenamiento de registros log poisoning. Cómo funciona la...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

A permissions issue in the CloudKit component of tvOS 27 and visionOS 27 allowed an app to read the device name . This vulnerability has been addressed by implementing additional restrictions . The fix is included in the release of iOS 27 , iPadOS 27 , tvOS 27 , visionOS 27 , and watchOS 27 . No ...

EUVD-2026-77919

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

CVE-2026-86893

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: ptp: A possible memory leak has been fixed in ptpclockregister. I encountered a memory leak during the fault injection test as follows: Unreferenced object: 0xffff88800906c618 size 8 Command: comm "i2c-idt82p33931", PID 4421,...

Astra Linux – Vulnerability found in Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: NTB: Fixed a possible name leak in ntbregisterdevice. If deviceregister fails in ntbregisterdevice, the device name allocated by devsetname should be freed. According to the comment in deviceregister, callers should use putdevice...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: A possible memory leak in mISDNregisterdevice has been fixed. After committing 1fa5ae857bb1 "driver core: get rid of struct device’s busid string array", the name of the device is allocated dynamically. The putdevice...

Astra Linux – Vulnerability in Linux

In the file drivers/pci/hotplug/rpadlpar/sysfs.c within the Linux kernel up to version 5.11.8, the RPA PCI Hotplug driver suffers a user-tolerable buffer overflow when writing a new device name to the driver from user space. This allows user space to write data directly to the kernel stack frame...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: scsi: core: Fix error handling of scsihostalloc After a device is initialized using deviceinitialize, or its name is set using devsetname, the device must be freed using putdevice. Otherwise, the device name will be leaked, as it...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.10, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: HID: uclogic: The reference to the devm device for the hidinput inputdevice name must be corrected. Instead of referring to the input device, the correct device should be used. Referring to the inputdevice would lead to a...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mISDN: a possible memory leak in mISDNdspelementregister has been fixed. After committing 1fa5ae857bb1 "driver core: get rid of struct device’s busid string array", the name of the device is allocated dynamically. Use putdevic...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: mtd: Fixed a device name leak when registering a device in addmtddevice. There is a kmemleak when registering a device fails: Unreferenced object 0xffff888101aab550 size 8: Command "insmod", PID 3922, jiffies 4295277753 age...

PT-2026-91694

A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 27 and iPadOS 27, tvOS 27, visionOS 27, watchOS 27. An app may be able to read device name...

MINI-VM33-G4VC-35H6

Bulletin has no description...

CVE-2026-16313

A flaw was found in sg3utils. The sginq command, when invoked with the --export option, outputs device identification data without sanitizing control characters in SCSI name string fields. A newline character embedded in a device-supplied name string can inject arbitrary properties into the udev...