CVE-2019-19204

CVE-2019-19204 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة fetchintervalquantifier المعروفة سابقًا باسم fetchrangequantifier في ملف regparse.c، يتم استدعاء PFETCH دون التحقق من PEND. يؤدي هذا إلى قراءة تتجاوز حدود المخزن المؤقت في الكومة heap-based buffer over-read. الباحث:...

CVE-2025-15614

ugrep before 7.6.0 is affected by a heap buffer over-read in its LZW decompressor (src/zopen.c) when processing crafted .Z archive files. The decompressor reads one byte past the allocated heap buffer , which can cause a process crash. The vulnerability requires a local attack vector and user int...

CVE-2025-15614 ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

EUVD-2025-210857

ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...

EUVD-2026-70821

There is an out-of-bounds read vulnerability in DASYLab due to improper validation of user-supplied data. This results in a read a past the end of an allocated heap buffer during string conversion. Successful exploitation requires an attacker to get a user to open a specially crafted .DSB file. ...

CVE-2026-7482

🚨 CVE-2026-7482: تجاوز قراءة في الذاكرة Heap Buffer Over-Read في Ollama 📝 الوصف يحدد CVE-2026-7482 ثغرة حرجة لتجاوز القراءة في الذاكرة Heap Buffer Over-Read في نقطتي النهاية /api/create و /api/push في Ollama ، وهو إطار عمل مفتوح المصدر لتشغيل نماذج اللغة محليًا. تسمح هذه الثغرة لمهاجم عن بُعد وغي...

CVE-2019-19203

CVE-2019-19203 تم اكتشاف مشكلة في Oniguruma 6.x قبل الإصدار 6.9.4rc2. في الدالة gb18030mbcenclen في الملف gb18030.c، يتم إلغاء الإشارة إلى مؤشر UChar دون التحقق من تجاوزه نهاية السلسلة المطابقة. يؤدي هذا إلى قراءة خارج حدود الذاكرة في الكومة heap-based buffer over-read. الباحث: ManhND من فريق The...

CVE-2019-19203

CVE-2019-19203 Oniguruma 6.x में 6.9.4rc2 से पहले एक समस्या पाई गई। gb18030.c फ़ाइल में gb18030mbcenclen फ़ंक्शन में, एक UChar पॉइंटर को बिना यह जांचे कि वह मिलान किए गए स्ट्रिंग के अंत से आगे निकल गया है या नहीं, dereference किया जाता है। इससे हीप-आधारित बफर ओवर-रीड होता है। शोधकर्ता: मैनएनडी ऑफ...

MiracleLinux 9 : nginx:1.24 (AXSA:2026-1718:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1718:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

MiracleLinux 9 : nginx:1.26 (AXSA:2026-1722:01)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1722:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

CVE-2026-70651

A flaw was found in libvips, an image processing library. When libvips is built without libtiff support but with ImageMagick support, an integer overflow can occur while loading a crafted multi-page Tagged Image File Format TIFF image. This overflow, caused by unchecked calculations of image fram...

CVE-2026-47729

🦑 CVE-2026-47729 - Squidbleed ⚠️ हार्टब्लीड का प्राचीन चचेरा भाई, 1997 से स्क्विड में छिपा हुआ। ✨ विशेषताएं एकल-फ़ाइल PoC — शून्य निर्भरताएँ NetWare बैनर और छोटे LIST उत्तर की नकल करने वाला मैलिशियस FTP सर्वर Basic Auth और Bearer टोकन की रीयल-टाइम पहचान और डिकोडिंग तेज़ लीक के लिए मल्टी-थ्रेडेड...

MiracleLinux 8 : nginx:1.24 (AXSA:2026-1679:01)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1679:01 advisory. nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial of...

nginx:1.26 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

Important: Red Hat Security Advisory: nginx:1.26 security update

An update for the nginx:1.26 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nginx: NGINX: Heap buffer over-read allows memory modification or denial of service

A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...

nginx:1.24 security update

An update is available for nginx, module.nginx. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list nginx is a web and proxy server supporting HTTP and other...

RLSA-2026:59490 Important: nginx:1.24 security update

nginx is a web and proxy server supporting HTTP and other protocols, with a focus on high concurrency, performance, and low memory usage. Security Fixes: nginx: NGINX: Heap buffer over-read allows memory modification or denial of service CVE-2026-56434 nginx: NGINX: Memory disclosure and denial o...

Important: Red Hat Security Advisory: nginx:1.24 security update

An update for the nginx:1.24 module is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

nginx: NGINX: Heap buffer over-read allows memory modification or denial of service

A vulnerability in NGINX's ngxhttpssimodule allows an unauthenticated MITM attacker to trigger a heap buffer over-read by manipulating upstream server responses. This requires SSI, proxypass, and proxybuffering off to be configured, and can result in memory modification or a Denial of Service DoS...