Improper Encoding or Escaping of Output

Overview @angular/platform-server is an Angular - library for using Angular in Node.js Affected versions of this package are vulnerable to Improper Encoding or Escaping of Output via the bundled domino dependency, which is used for server-side DOM emulation during Angular Universal rendering. An...

DCS932L-Emulation-CVE-2024-37606-Attack

エミュレーションを再び簡単に ようこそ！このリポジトリは、D-Link DCS-932L ファームウェアをエミュレートし、CVE-2024-37606 の脆弱性を実証するためのツールと環境を提供します。パッチ適用済みのバイナリと必要なライブラリが含まれており、Ghidra などのツールを使った手動パッチ適用を必要とせず、エミュレーションのセットアップを簡略化します。 CVE-2024-37606 このプロジェクトには、CVE-2024-37606 の概念実証エクスプロイト CVE-2024-37606-DCS932L.py が含まれています。この脆弱性は、alphapd...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

FreeRDP: FreeRDP: Denial of Service via crafted smartcard cache requests

A flaw was found in FreeRDP. When smartcard emulation is enabled, a remote attacker can send specially crafted smartcard cache requests to a FreeRDP client. This can lead to a null pointer dereference, causing the client process to terminate and disrupting active remote desktop sessions...

SUSE SLES12: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2026:4089-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4089-1 advisory. - CVE-2026-62437: x86: DMs may cause mem leak by IRQ binding bsc1276838. - CVE-2026-79602: x86: improper handling of HVM emulation...

speakeasy v2.0.0b8

Speakeasy Speakeasy is a Windows malware emulation framework that executes binaries, drivers, and shellcode in a modeled Windows runtime instead of a full VM. It emulates APIs, process/thread behavior, filesystem, registry, and network activity so samples can keep moving through realistic executi...

PT-2026-93572

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the KVM nVMX component where the KVM REQ GET NESTED STATE PAGES flag is not consistently cleared during a nested VM-Exit emulation. This occurs even when KVM is built...

cowrie v3.0.14

.. SPDX-FileCopyrightText: 2014 Upi Tamminen [email protected] .. SPDX-FileCopyrightText: 2014-2025 Michel Oosterhof [email protected] .. .. SPDX-License-Identifier: BSD-3-Clause Cowrie What is Cowrie Cowrie is a medium to high interaction SSH and Telnet honeypot designed to log brute...

Astra Linux – Vulnerability in Qemu

QEMU 4.2.0 has a use-after-free issue in hw/net/e1000ecore.c, as a user of the guest OS can trigger an e1000e packet with the data’s address set to the e1000e’s MMIO address...

Astra Linux – Vulnerability in Qemu

A reentrancy issue related to DMA was discovered in the USB EHCI controller emulation of QEMU. EHCI does not verify whether the Buffer Pointer overlaps with its MMIO region when transferring USB packets. Crafted content may be written to the controller’s registers, potentially triggering...

Astra Linux – Vulnerability in Qemu

An “off-by-one” error was detected in the SCSI device emulation in QEMU. This error could occur during the processing of MODE SELECT commands in modesensepage, if the ‘page’ argument is set to MODEPAGEALLS 0x3f. A malicious guest could exploit this flaw to potentially cause QEMU to crash, resulti...

Astra Linux – Vulnerability in Linux, Linux 5.10

There is a bug in /net/nfc/netlink.c that allows an attacker to crash the Linux kernel by simulating an NFC device from user-space...

Astra Linux – Vulnerability in Qemu

A flaw was discovered in the QXL display device emulation in QEMU. The double retrieval of the guest-controlled values cursor-header.width and cursor-header.height can lead to the allocation of a small cursor object, followed by a subsequent heap-based buffer overflow. A malicious privileged gues...

Astra Linux – Vulnerability in Qemu

A divide-by-zero issue was discovered in dwc2handlepacket in hw/usb/hcd-dwc2.c, within the hcd-dwc2 USB host controller emulator in QEMU. A malicious guest could exploit this flaw to crash the QEMU process on the host, resulting in a denial of service...

Astra Linux – Vulnerability in Qemu

A out-of-bounds write flaw was discovered in the UAS USB-attached SCSI device emulation in QEMU in versions prior to 6.2.0-rc0. The device uses the guest-provided stream number without proper checking, which can lead to out-of-bounds access to the UASDevice-data3 and UASDevice-status3 fields. A...

Astra Linux – Vulnerability in Qemu

An integer underflow issue was discovered in the QEMU VNC server while processing ClientCutText messages in the extended format. A malicious client could exploit this flaw to render QEMU unresponsive by sending a specially crafted payload message, resulting in a denial of service...

Astra Linux – Vulnerability in Qemu

A use-after-free vulnerability was discovered in the LSI53C895A SCSI Host Bus Adapter emulation in QEMU. The flaw occurs during the processing of repeated messages to cancel the current SCSI request using the lsidomsgout function. This flaw allows a malicious privileged user within the guest to...

Astra Linux – Vulnerability in Qemu

A use-after-free vulnerability was discovered in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue may cause a crash or a virtual machine to escape...

Astra Linux – Vulnerability in Qemu

A out-of-bounds read flaw was discovered in the QXL display device emulation in QEMU. The qxlphys2virt function does not check the size of the structure pointed to by the guest physical address, potentially allowing it to read beyond the bounds of the bar space onto adjacent pages. A malicious...