392 matches found
CVE-2022-38694_unlock_bootloader
CVE-2022-38694 Un atacante con acceso físico al dispositivo puede sobrescribir un puntero a función en algún lugar de la sección de datos de la BootROM o una dirección de retorno almacenada en la pila y ejecutar su propio código con privilegios de BootROM. Para obtener información detallada, lea ...
pe-bear
PE-bear PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files...
CVE-2025-52413
CVE-2025-52413 — Particle Device OS BLE Buffer Overflow Discoverer : Golden Ticket Labs Vendor : Particle Date Assigned : August 12th 2025 MITRE Description A buffer overflow in the blecontrolrequestchannel.cpp component of Particle Device OS v5.6.0 enables arbitrary function pointer overwrite du...
cve-2025-2082-POV
CVE-2025-2082 – Function Pointer Overwrite PoV VCSEC-style This repository demonstrates a Proof of Vulnerability PoV simulating a critical memory corruption flaw inspired by CVE-2025-2082, discovered in Tesla's VCSEC Vehicle Controller Security component. The vulnerability allows an attacker to...
CVE-2026-88383
A flaw was found in libical. When parsing calendar data containing parameterized properties, the library improperly invokes an internal search callback due to a function pointer mismatch. An attacker could exploit this vulnerability by providing specially crafted iCalendar data to an application...
DEBIAN-CVE-2026-88383
libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...
CVE-2026-88383
libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...
optee-qemu
CVE-2021-44733: Fuzzing y explotación de un use-after-free en el subsistema TEE del kernel de Linux Recientemente se descubrió una vulnerabilidad de use-after-free en el subsistema TEE del kernel de Linux, hasta la versión 5.15.11 inclusive, y se le asignó CVE-2021-44733 1. A primera vista no...
CVE-2021-38304-PoC
CVE-2021-38304 Prueba de Concepto Resumen Este repositorio contiene una prueba de concepto para una vulnerabilidad de seguridad crítica en versiones antiguas del controlador nipalk.sys de National Instruments. La vulnerabilidad permite la ejecución arbitraria de código y la divulgación de memoria...
CVE-2026-88383
The libical 4.0.6 library is vulnerable to a denial of service due to an incompatible function pointer in icalparameter_string_to_kind() . When parsing iCalendar data with a parameterized property, the function incorrectly passes icalparameter_compare_kind_map() to bsearch() through a mismatched ...
EUVD-2026-86316
libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the function passes icalparametercomparekindmap to bsearch through an incompatible comparator function pointer type. bsearch invokes the callback...
Linux Distros Unpatched Vulnerability : CVE-2026-88383
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libical 4.0.6 contains an incompatible function pointer in icalparameterstringtokind. When parsing iCalendar data containing a parameterized property, the...
CVE-2025-65018_Exploit_Challenge
CVE-2025-65018 Desafío CTF: "PNG Panic" Este desafío se basa en una vulnerabilidad real de desbordamiento de búfer en libpng específicamente relacionada con la API simplificada pngimagefinishread al manejar imágenes entrelazadas de 16 bits. 🚩 Objetivo del Desafío Se te proporciona un binario...
SUSE-SU-2026:4282-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 12 SP5 kernel was updated to fix various security issues: The following security issues were fixed: - CVE-2025-40277: drm/vmwgfx: Validate command header size against bsc1254894. - CVE-2025-68214: timers: Fix NULL function pointer race in timershutdownsync bsc1255225. -...
CVE-2024-27398
CVE-2024-27398 CVE-2024-27398 POC 📍 GDB Breakpoints root@kitploit: GNU gdb Ubuntu 12.1-0ubuntu122.04.2 12.1 Copyright C 2022 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: Media: dvb-net: fixed OOB access in ULE extension header tables The ulemandatoryexthandlers and uleoptionalexthandlers tables in handleoneuleextension are declared with 255 elements valid indices 0-254. However, the htype index i...
Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1
In the Linux kernel, the following vulnerability has been resolved: drm/ioc32: Speculation on the drcmpioctl path has been stopped. The drcmpioctl path takes a user-controlled pointer, and then dereferences it into a table of function pointers, which can lead to Spectre-related problems. This iss...
Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1
In the Linux kernel, the following vulnerability has been resolved: pinctrl: Single issue: fix the potential NULL dereference in pcsgetfunction. The pinmuxgenericgetfunction function may return NULL, and the pointer “function” was dereferenced without checking against NULL. Add checking of the...
Unity Linux 20.1070-8ae / 20.1070e Security Update: kernel (UTSA-2026-105436)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-105436 advisory. In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: Fix return type of netcpndostartxmit With clang's kernel control flow integrit...
UBUNTU-CVE-2026-80691
In the Linux kernel, the following vulnerability has been resolved: scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE In the iblockexecuteprout function, PROPREEMPT, PROPREEMPTANDABORT, and PRORELEASE all perform callback capability checks through ops-prclear. The error check...