POC-CVE-2026-18729

설명 CVE-2026-18729에 대한 개념 증명PoC 익스플로잇 코드 사용법 python3 poc.py -url -uname -pword -c bash 명령어 없이 0으로 나누기 오류를 통한 코드 실행 증명 bash 명령어와 함께 참고: 엔드포인트가 컴포넌트 템플릿과 메타데이터만 반환하므로 bash 출력은 반환되지 않습니다. bash 출력은 빌드 범위 내의 out에 저장되며 JSON 응답으로 직렬화되지 않으므로, 명령 출력이 없다고 해서 명령이 실행되지 않았다는 의미는 아닙니다...

MOEW

보이지 않는 위협, 가시적인 해결책. 정렬이 어긋난 Opcode 예외 폭포 MOEW 3단계 SEH 폭포 PoC 무해, x86/Wow64 TL;DR: 이 PoC는 의도적인 정렬이 어긋난 실행 이 0으로 나누는 div reg 명령어가 첫 번째 유효 명령어인 원시 바이트 블롭으로 이어져 발생하는 3단계 구조적 예외 처리SEH 연쇄 를 보여줍니다. 각 예외 단계는 다음 SEH 핸들러를 설치하고, 새로운 정렬이 어긋난 0으로 나누기를 트리거하며, 무해한 관찰 가능 페이로드를 실행한 후 원래 SEH 체인을 복원하고 깔끔하게 종료됩니다...

CVE-2026-89542

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gsskrb5unwrapv2 against short tokens gsskrb5unwrapv2 reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSSKRB5TOKHDRLEN 16 bytes long, and its rotateleft helper pass...

CVE-2026-89542

CVE-2026-89542 affects the Linux kernel SUNRPC subsystem, specifically the gss_krb5_unwrap_v2() function used during Kerberos GSS authentication. The function reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least 16 bytes long, and its rotate_left() he...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration fu...

UBUNTU-CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration fu...

PT-2026-90258

In the Linux kernel, the following vulnerability has been resolved: SUNRPC: harden gss krb5 unwrap v2 against short tokens gss krb5 unwrap v2 reads the EC and RRC header fields at ptr+4 and ptr+6 before validating that the token is at least GSS KRB5 TOK HDR LEN 16 bytes long, and its rotate left...

Linux Distros Unpatched Vulnerability : CVE-2026-79513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of...

POC-CVE-2026-0769

설명 사용법 python3 poc.py -u -c Bash 명령 없이 0으로 나누기 오류를 통한 코드 실행 증명 Bash 명령과 함께 참고: 엔드포인트는 컴포넌트 템플릿과 메타데이터만 반환하므로 Bash 출력은 반환되지 않습니다. Bash 출력은 빌드 범위 내의 out에 저장되며 JSON 응답으로 직렬화되지 않습니다. 따라서 명령 출력이 없다고 해서 명령이 실행되지 않았다는 의미는 아닙니다...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79513

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows an attacker to trigger a Denial of Service by supplying a crafted MPD SegmentTimeline. The CVSS 3.1 score is 6.5 (Medium) with a network attack vector, low complexi...

PT-2026-89146

A divide-by-zero vulnerability in the gf dash get timeline duration function src/media tools/dash client.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

EUVD-2026-75167

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-85458

A flaw was found in Xpdf. This vulnerability, a divide-by-zero error, occurs when the application processes a Type 3 font glyph that has a zero height. A local attacker could exploit this condition to trigger a crash, leading to a denial of service and making the application unavailable. Mitigati...

AZL-99588 CVE-2026-80847 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80847

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

EUVD-2026-71297

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...

CVE-2026-80847 tcp: clamp route advmss to TCP_MIN_MSS

In the Linux kernel, the following vulnerability has been resolved: tcp: clamp route advmss to TCPMINMSS tcpselectinitialwindow assumes that callers never pass an MSS smaller than 1, but route-derived advmss values can violate that assumption. A too-small explicit RTAXADVMSS is one way to get...