Astra Linux – Vulnerability in Linux 5.10, Linux, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: Wifi: wilc1000 – fixed a potential memory leak in wilcmacxmit The wilcmacxmit function returns NETDEVTXOK without freeing the skb buffer; this issue was addressed by using devkfreeskb to free the buffer. This fix has been tested...

Astra Linux – Vulnerability in vorbis-tools

A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package, within the remotethread function in remote.c. This vulnerability occurs during the remote control functionality, when processing malformed inputs, resulting in a buffer underflow that c...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: fecm: Refactor the bind path to use free After a bind/unbind cycle, the ecm-notifyreq remains stale. If a subsequent bind fails, the unified error handling mechanism attempts to free this stale request. This leads to...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: jfs: Fixed the uninit-value access to imap allocated in the diMount function. The syzbot reports that hexdumptobuffer uses uninit-value: ===================================================== BUG: KMSAN: uninit-value in...

Astra Linux – Vulnerability in glibc

The wordexp function in the GNU C Library also known as glibc, up to version 2.33, may crash or access arbitrary memory during the parseparam function located in posix/wordexp.c when called with an untrusted, crafted pattern. This could potentially lead to a denial of service or the disclosure of...

Astra Linux – Vulnerability in libwebp

A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the ShiftBytes function...

Astra Linux – Vulnerability in xrdp

xrdp is an open-source project that provides a graphical login to remote machines using the Microsoft Remote Desktop Protocol RDP. xrdp v0.9.21 contains a “Out of Bound Read” issue in the xrdpmmtransprocessdrdynvcchannelclose function. There are no known solutions to this problem. Users are advis...

Astra Linux – Vulnerability in DjVuLibre

A flaw was discovered in djvulibre-3.5.28 and earlier. A heap buffer overflow occurs in the function DJVU::GBitmap::decode, due to a malicious djvu file, which may lead to the application crashing and other related issues...

Astra Linux – Vulnerability found in Linux 6.1, Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: In the tty module, for the serial subsystem, there is a issue where the uartlite driver is registered within the init function. When two instances of the uart device are being probed, a concurrency race may occur. If one thread...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerability has been resolved: hvnetvsc: Fixed a panic that occurred during namespace deletion with VF. The existing code moves the VF NIC to a new namespace when NETDEVREGISTER is received on the netvsc NIC. During the deletion of the namespace,...

CVE-2022-32981

CVE-2022-32981 poc pour CVE-2022-32981 en cours de développement nécessite des tests + ajustement de l'offset vers le correct pour la fonction d'exploitation...

radare2-scripts

radare2 Scripts Краткое описание «Коллекция» скриптов для использования с radare2. r2bincarver.py — скрипт для извлечения файлов из дампов памяти. r2hashfuncdecoder.py — скрипт для декодирования хешированных функций, часто встречающихся в шеллкоде. Скрипты Binary Carver Этот скрипт извлекает файл...

cve-2020-11023-demonstration

Jquery XSS - CVE-2020-11023 Это демонстрация воспроизведения CVE-2020-11023. Источник в основном из этого поста в блоге. Воспроизведение Установите зависимости npm с помощью npm install, jQuery 3.4.1 включена как зависимость. Запустите проект, например, с помощью live server для VS Code. Сайт...

React2Hell

🧨 React2Hell — Эксплойт CVE-2025-55182 🔥 Эксплойт удаленного выполнения кода на сервере Next.js / React Server RCE █████▄ ▄▄▄▄▄ ▄▄▄ ▄▄▄▄ ▄▄▄▄▄▄ ████▄ ██ ██ ▄▄▄▄▄ ▄▄ ▄▄ ██▄▄██▄ ██▄▄ ██▀██ ██▀▀▀ ██ ▄██▀ ██████ ██▄▄ ██ ██ ██ ██ ██▄▄▄ ██▀██ ▀████ ██ ███▄▄ ██ ██ ██▄▄▄ ██▄▄▄ ██▄▄▄ Next.js/React Server...

CVE-2026-105226

A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in code injection. The attack is possible...

CVE-2026-105225 osCommerce osCommerce2 Payment payment.php include code injection

A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULEPAYMENTINSTALLED leads to code injection. The attack can be executed remotely...

MAL-2026-17531 Malicious code in api-nebula (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b8232ec7756422686c2bce805fc87821e61a5bd9176cdb2fe7c3190fd2b2eae2 The package declares "preinstall": "node preinstall.cjs" in package.json, and preinstall.cjs is a single-line 187 KB Function"pbeIUC", "…" invocation...

CVE-2019-1663-Binary-Analysis

Бинарный анализ CVE-2019-1663 Автор: Corentin Wolff Происхождение уязвимости Источник уязвимости Уязвимость возникает в функции 0x0002BF64, которая неправильно использует strcpy, что делает её подверженной атакам переполнения буфера. Для ясности эта функция переименована в Login. Ниже приведён...

CVE-2016-3714

CVE-2016-3714 Выполнение кода в ImageMagick CVE-2016-3714 imagickbuilder.py = Простой конструктор пейлоада для эксплуатации CVE-2016-3714 imagickbypassshell.php = PHP-веб-шелл, использующий обёртку расширения PHP imagick для обхода отключённых функций Несколько изображений работы: Конструктор...

MAL-2026-17510 Malicious code in internallib_v275 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 80c1c6d383b3defb01da235e39e08ce56276d887e63d900aea2ee689836f71b4 index.js exports a command function that invokes /bin/bash -c to curl a reverse-shell payload from reverse-shell.sh targeting the hardcoded host...