OESA-2026-3971 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape....

OESA-2026-3972 python-tornado security update

Tornado is an open source version of the scalable, non-blocking web server and tools. Security Fixes: Tornado is a Python web framework and asynchronous networking library. Prior to 6.5.8, Tornado parses application/x-www-form-urlencoded request bodies with urllib.parse.parseqs in tornado/escape....

OESA-2026-3969 gstreamer1-plugins-base security update

GStreamer is a graphics library for built-in media processing components. BasePlug-ins is a the collections used to maintain the GStreamer plugin. Security Fixes: A NULL pointer dereference flaw was found in GStreamer's RTSP support library. The vulnerability occurs while parsing an Authorization...

OESA-2026-3953 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3952 python-Keras security update

Keras is a high-level neural networks API for Python. Security Fixes: A vulnerability in keras-team/keras versions = 3.15.0 allows for a denial of service DoS attack when loading malicious .keras model files via the keras.models.loadmodel function. The H5IOStore.getitem method in...

OESA-2026-3942 pcp security update

Performance Co-Pilot PCP provides a framework and services to support system-level performance monitoring and performance management. Security Fixes: A command injection flaw in PCP's linuxsockets PMDA allows malicious shell metacharacters via the network.persocket.filter metric. This failed...

OESA-2026-3929 openvpn security update

OpenVPN is a full-featured open source SSL VPN solution that accommodates a wide range of configurations, including remote access, site-to-site VPNs, Wi-Fi security, and enterprise-scale remote access solutions with load balancing, failover, and fine-grained access-controls. Starting with the...

OESA-2026-3922 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: OpenSSL CMS decryption sizes the key-unwrap output buffer based on querying the unwrapped key size, but the AES-WRAP-PAD unwrap primitive can write...

OESA-2026-3910 wget security update

GNU Wget is a free software package for retrieving files using HTTP, HTTPS, FTP and FTPS the most widely-used Internet protocols. It is a non-interactive commandline tool, so it may easily be called from scripts, cron jobs, terminals without X-Windows support, etc. Security Fixes: GNU wget is...

OESA-2026-3878 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3877 ffmpeg security update

FFmpeg is a complete and free Internet live audio and video broadcasting solution for Linux/Unix. It also includes a digital VCR. It can encode in real time in many formats including MPEG1 audio and video, MPEG4, h263, ac3, asf, avi, real, mjpeg, and flash. Security Fixes: A flaw was found in...

OESA-2026-3872 hdf5 security update

HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...

Unauthenticated-CVE-2020-0796-PoC

CVE-2020-0796 未認証 Proof-of-Concept（PoC） これまで見てきたProof-of-Conceptスクリプトは、すべてユーザー名とパスワードの両方を必要とするものでした。そこで、独自のPoCを公開することにしました。凝ったものではありませんが、動作します。 追加のモジュールは不要で、Python 3で動作します。 使い方: python3 crash.py 192.168.0.2...

cve-2026-45185-detection-script

CVE-2026-45185 検出スクリプト c SECPlayground Platform —https://www.secplayground.com これらの検出スクリプトは SECPlayground Platform の所有物です。 2 つの安全な検出スクリプトです。どちらも closenotify-mid-BDAT トリガーを起動しないため、デーモンをクラッシュさせたり、パニックログのエントリを残したりすることはありません。 両方の判定結果は「脆弱性の可能性が高い」です — GnuTLS と OpenSSL ビルドをリモートで区別することは、実際に悪用しない限り信頼できませ...

cve-2018-6389-php-patcher

cve-2018-6389-php-patcher 使用PHP修补WordPress DOS漏洞（CVE-2018-6389）。 1. 将 patcher.php 放置在 WordPress 根目录 2. 访问 yourwordpress.com/patcher.php 3. 删除 patcher.php 来源：https://www.securemydata.fr/patch-de-la-faille-cve-2018-6389-dos-wordpress/...

CVE-2024-20137

CVE-2024-20137 MediaTek SOC MT6890、MT7622、MT7915、MT7916、MT7981、MT7986 の WLAN ドライバにおける脆弱性を悪用するための Python コード MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 コードについて このコードは Python 3 で書かれており、Scapy...

CVE-2019-0708

CVE-2019-0708 CVE-2019-0708 批量ブルースクリーン悪戯 テスト環境：win7、win2008、win2008r2 使い方： python bluekeep.py -u ./你的文件.txt -b 64（システムのビット数）...

OPENSUSE-SU-2026:21889-1 Security update for libheif

This update for libheif fixes the following issues: - CVE-2026-84383: Heap buffer overflow in scalenearestneighbor via duplicate alpha planes from nested iden/auxl items bsc1279443. - CVE-2026-84384: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS...

CVE-2026-94108

getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0. Attackers can craft malicious XML metadata in media files to disclose local files, perform server-side request forgery, o...

CVE-2024-43630-POC

CVE-2024-43630-POC このリポジトリには、実行時にスタック上のOOB書き込みを引き起こし、システムをクラッシュさせるPOCが含まれています。この脆弱性は、カーネルプログラミング、特にオブジェクト管理の複雑さと特異性を示す、非常に興味深く珍しい遺物です。さらに、この脆弱性はWindows 11 24h2、Windows 10 22h2/21h2のカーネルに影響しますが、Windows 11 22h2/23h2には影響しません。これもまた興味をそそります。 2024年11月12日にパッチ適用済み 影響を受けるWindowsバージョン Windows 11 Version 24...