rustproofing-linux

Rustproofing Linux Porting Linux Kernel Bugs to Rust This source code repository is a collection of examples accompanying the blog post at https://research.nccgroup.com/?p=18577. DO NOT USE these examples for anything but following the blog post. They intentionally contain vulnerabilities, and ev...

MAL-009

MAL-009: Insecure Chaining of Flags T and TT in Zip for Linux In Zip for Linux, the “-TT” flag can be used to run arbitrary system commands. Due to the dangerous nature of this flag, it must always be used at the same time as the “-T” flag. By using a flag chaining attack, attackers that should...

ProcDump-for-Linux

ProcDump ProcDump 是经典 ProcDump 工具（来自 Windows 的 Sysinternals 套件）在 Linux 和 Mac 上的重新实现。ProcDump 为 Linux 和 Mac 开发者提供了一种便捷的方式，基于性能触发器为应用程序创建核心转储（core dump）。ProcDump for Linux and Mac 是 Sysinternals 的一部分。 安装与使用 系统要求 最低 Linux 操作系统版本： Red Hat Enterprise Linux / CentOS 7 Fedora 29 Ubuntu 16.04 LTS gdb =...

CVE-2026-86930

An out-of-bounds read vulnerability in FileMaker Server for Linux allowed an attacker uploading a specially crafted image file to a container field to disclose process memory during thumbnail generation in FileMaker WebDirect. This vulnerability is addressed in FileMaker Server version 26.0.3...

CVE-2026-65128

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause SQL injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65117

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause use of a hard-coded password. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-65121

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an improper authentication issue. A successful exploit of this vulnerability might lead to escalation of privileges, information disclosure, and data tampering...

CVE-2026-65124

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause an XML injection. A successful exploit of this vulnerability might lead to data tampering and denial of service...

CVE-2026-65126

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause improper enforcement of a behavioral workflow. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure...

CVE-2026-65112

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

EUVD-2026-84422

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause uncontrolled resource consumption. A successful exploit of this vulnerability might lead to denial of service...

CVE-2026-65112

The NVIDIA Infrastructure Controller for Linux is vulnerable to uncontrolled resource consumption , which may lead to a denial of service (DoS). The root cause is identified as CWE-400 . This vulnerability affects versions 0 to 1.9 on the Linux platform. To remediate this issue, users should upda...

CVE-2026-65115

The NVIDIA Infrastructure Controller for Linux is vulnerable to uncontrolled resource consumption, as identified in CVE-2026-65115 . This flaw, categorized under CWE-400 , allows an attacker to potentially cause a denial of service (DoS). The vulnerability affects versions 0 to 1.9 . To remediate...

EUVD-2026-84419

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker may cause uncontrolled resource consumption. A successful exploit of this vulnerability may lead to denial of service...

CVE-2026-65114

The NVIDIA Infrastructure Controller for Linux is affected by a vulnerability involving missing authentication for a critical function (CWE-306). An attacker could exploit this to cause data tampering , denial of service , and information disclosure . This issue affects versions 0 to 1.9 . To rem...

CVE-2026-65113

NVIDIA Infrastructure Controller for Linux contains a vulnerability (CWE-798) that allows an attacker to trigger the use of hard-coded credentials . Successful exploitation may result in escalation of privileges , data tampering , denial of service , and information disclosure . This issue affect...

EUVD-2026-84416

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause OS command injection. A successful exploit of this vulnerability might lead to code execution, data tampering, denial of service, and information disclosure...

CVE-2026-65129

The NVIDIA Infrastructure Controller for Linux (versions 0 to 1.9 ) contains a vulnerability where an attacker could cause improper certificate validation (CWE-295). A successful exploit of this vulnerability could lead to information disclosure , data tampering , and denial of service . To mitig...

EUVD-2026-84413

NVIDIA Infrastructure Controller for Linux contains a vulnerability where an attacker could cause exposure of sensitive system information due to uncleared debug information. A successful exploit of this vulnerability might lead to information disclosure...

CVE-2026-65127

The NVIDIA Infrastructure Controller for Linux versions 0 to 1.9 is vulnerable to an information disclosure flaw (CWE-1258). The root cause is uncleared debug information , which could allow an attacker to expose sensitive system information. To remediate this vulnerability, users should update t...