wongpress

缓冲区溢出与格式化字符串漏洞的真实案例：在 Ubuntu Server 中获取 RCE 相关 CVE CVE-2024-2961 : Glibc iconv 函数中的缓冲区溢出漏洞 CVE-2024-29510 : Ghostscript（PostScript 语言解释器）中的格式化字符串漏洞 1. 问题背景 soon 。 2. 攻击场景 soon 。 3. 环境搭建 项目结构 soon 。 4. 漏洞利用 soon 。 5. 参考资料 soon 。...

CVE-2019-7711

🛡️ CVE-2019-7711: Green Hills INTEGRITY RTOS Information Leak 📌 Repository for technical documentation and resources on the Format String vulnerability in the Telnet server of Green Hills INTEGRITY RTOS v5.0.4. 📖 General Description The vulnerability affects the IPCOMShell Telnet server from...

CVE-2024-23113

CVE-2024-23113 该脚本用于检测 CVE-2024-23113，这是一个 FortiGate FGFM 服务（FortiGate 到 FortiManager 协议）中的格式字符串漏洞，该服务运行在 TCP 端口 541 上。漏洞产生的原因在于攻击者可以控制一个格式字符串，这可能导致远程代码执行（RCE）或其他非预期行为。FGFM 服务允许 FortiGate 设备与 FortiManager 之间进行配置管理通信，未修补版本对输入处理不当，从而易受格式字符串攻击。 脚本工作原理 1. 网络连接建立 ： 脚本首先与目标主机的 541 端口建立 SSL/TLS 连接。 它使用...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

EUVD-2026-90453

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

CVE-2026-14157

A Use of an Externally Controlled Format String vulnerability exists in ASUS Router modules . A remote authenticated user can execute arbitrary commands by uploading a crafted file through the web management interface . No specific affected versions, root cause details, or remediation steps are p...

Linux Distros Unpatched Vulnerability : CVE-2026-47494

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue. A successful exploit of this vulnerabili...

AlmaLinux 9.2 [TuxCare] Security Update: ghostscript / ghostscript-doc / ghostscript-gtk / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1744782967)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1744782967 advisory. - A buffer overflow flaw was found in base/gdevdevn.c:1973 in devnpcxwriterle in ghostscript. This issue may allow a local attacker ...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1776257247)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1776257247 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions...

CentOS Linux 8 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776257014)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776257014 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to ImageMagick versions...

Rocky Linux 8 [CIQ] Security Update: libinput / libinput-debuginfo / libinput-debugsource / etc (crlsa-2022_5331)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225331 advisory. libinput: format string vulnerability may lead to privilege escalation CVE-2022-1215 Tenable has extracted the preceding description block directly from the CIQ...

AlmaLinux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779493861)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779493861 advisory. - Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an...

CentOS Linux 7 [TuxCare] Security Update: libinput / libinput-devel (CENTOS7:CLSA-2026:1776957467)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1776957467 advisory. - A format string vulnerability was found in libinput CVE-2022-1215 Note that Nessus has not tested for this issue but has instead relied only on...

Rocky Linux 9 [CIQ] Security Update: libinput / libinput-debuginfo / libinput-debugsource / etc (crlsa-2022_5257)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20225257 advisory. libinput: format string vulnerability may lead to privilege escalation CVE-2022-1215 Tenable has extracted the preceding description block directly from the CIQ...

PT-2026-103658

Name of the Vulnerable Software and Affected Versions ASUS Router affected versions not specified Description An issue exists where the use of an externally controlled format string in the router modules allows a remote authenticated user to execute arbitrary commands. This is achieved by uploadi...

Rocky Linux 9 [CIQ] Security Update: ghostscript / ghostscript-debuginfo / ghostscript-debugsource / etc Multiple Vulnerabilities (crlsa-2024_6197)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20246197 advisory. ghostscript: format string injection leads to shell command execution SAFER bypass CVE-2024-29510 ghostscript: path traversal and command execution due to...

CVE-2026-14157: Use of Externally-Controlled Format String

Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute arbitrary commands via a crafted file uploaded through the web management interface...

Rocky Linux 9.6 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1779493861)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1779493861 advisory. - Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize ...

AlmaLinux 9.2 [TuxCare] Security Update: postgresql / postgresql-contrib / postgresql-docs / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2026:1779707025)

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1779707025 advisory. - Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrar...