19132 matches found
CVE-2026-42945
CVE-2026-42945: NGINX Rift ╪л╪║╪▒╪й ╪к╪м╪з┘И╪▓ ╪│╪╣╪й ╪з┘Д┘Е╪о╪▓┘Ж ╪з┘Д┘Е╪д┘В╪к ┘Б┘К ╪з┘Д┘Г┘И┘Е╪й ┘Ж╪╕╪▒╪й ╪╣╪з┘Е╪й CVE-2026-42945 ┘З┘К ╪л╪║╪▒╪й ╪о╪╖┘К╪▒╪й ┘Е┘Ж ┘Ж┘И╪╣ ╪к╪м╪з┘И╪▓ ╪│╪╣╪й ╪з┘Д┘Е╪о╪▓┘Ж ╪з┘Д┘Е╪д┘В╪к ┘Б┘К ╪з┘Д┘Г┘И┘Е╪й Heap Buffer Overflow ┘Б┘К ╪о╪з╪п┘Е NGINX╪М ┘И╪к┘П╪╣╪▒┘Б ╪и╪з╪│┘Е "NGINX Rift". ╪к┘И╪м╪п ┘З╪░┘З ╪з┘Д╪л╪║╪▒╪й ┘Б┘К ┘Е┘Ж╪╖┘В ┘Е╪╣╪з┘Д╪м╪й ╪к┘И╪м┘К┘З┘К rewrite ┘Иset ┘Б┘К NGINX. ╪╣┘Ж╪п ╪к┘И┘Б╪▒ ╪┤╪▒┘И╪╖ ╪к┘Г┘И┘К┘Ж ┘Е╪н╪п╪п╪й╪М...
CVE-2022-30292
CVE-2022-30292 ╪з┘Д┘И╪╡┘Б ┘З╪░┘З ╪з┘Д╪л╪║╪▒╪й ╪╣╪и╪з╪▒╪й ╪╣┘Ж ╪к╪м╪з┘И╪▓ ╪│╪╣╪й ╪з┘Д┘Е╪о╪▓┘Ж ╪з┘Д┘Е╪д┘В╪к ╪з┘Д┘Е╪│╪к┘Ж╪п ╪е┘Д┘Й ╪з┘Д┘Г┘И┘Е╪й heap-based buffer overflow ┘Б┘К ╪з┘Д╪п╪з┘Д╪й threadcall ┘Б┘К Squirrel 3.2 ┘И┘Е╪з ╪п┘И┘Ж. ╪к╪н╪п╪л ╪и╪│╪и╪и ╪╣╪п┘Е ╪з╪│╪к╪п╪╣╪з╪б ╪з┘Д╪п╪з┘Д╪й sqreservestack. ╪к╪д╪п┘К ┘З╪░┘З ╪з┘Д╪л╪║╪▒╪й ╪е┘Д┘Й ╪н╪▒┘Е╪з┘Ж ╪з┘Д╪╣┘Е┘К┘Д ┘Е┘Ж ╪з┘Д╪о╪п┘Е╪й DoS ┘И╪▒╪и┘Е╪з ╪к╪д╪п┘К ╪е┘Д┘Й ╪з┘Д┘З╪▒┘И╪и ┘Е┘Ж ╪и┘К╪ж╪й ╪з┘Д╪╣╪▓┘Д sandbox esca...
CVE-2026-42945
NGINX Rift CVE-2026-42945 рдХреЗ рд▓рд┐рдП RCE рдкреНрд░реВрдл рдСрдл рдХреЙрдиреНрд╕реЗрдкреНрдЯ, рдЬреЛ NGINX рдХреЗ ngxhttprewritemodule рдореЗрдВ 2008 рдореЗрдВ рдкреЗрд╢ рдХрд┐рдпрд╛ рдЧрдпрд╛ рдПрдХ рдЧрдВрднреАрд░ рд╣реАрдк рдмрдлрд░ рдУрд╡рд░рдлреНрд▓реЛ рд╣реИред рдпрд╣ рдмрдЧ rewrite рдФрд░ set рдирд┐рд░реНрджреЗрд╢реЛрдВ рдХрд╛ рдЙрдкрдпреЛрдЧ рдХрд░рдиреЗ рд╡рд╛рд▓реЗ рд╕рд░реНрд╡рд░реЛрдВ рдХреЗ рд╡рд┐рд░реБрджреНрдз рдмрд┐рдирд╛ рдкреНрд░рдорд╛рдгреАрдХрд░рдг рдХреЗ рд░рд┐рдореЛрдЯ рдХреЛрдб рдирд┐рд╖реНрдкрд╛рджрди рдХреЛ рд╕рдХреНрд╖рдо рдмрдирд╛рддрд╛ рд╣реИред рдпрд╣ рднреЗрджреНрдпрддрд╛ тАФ рддреАрди рдЕрдиреНрдп рдореЗрдореЛ...
Blackash-CVE-2025-54574
ЁЯЫС CVE-2025-54574 тАФ Overflow del buffer heap in Squid тЙд 6.3 ЁЯЫС Gravit├а: Critica CVSS 9.3 Software interessato: Squid Proxy versioni 6.3 e precedenti Tipo di vulnerabilit├а: Overflow del buffer basato su heap Rilevata in: elaborazione URN Uniform Resource Name Impatto: Possibile esecuzione di codice ...
CVE-2023-38545-POC
CVE-2023-38545 POC per lo strumento da riga di comando curl Questo POC si basa sul precedente POC creato da UTsweetyfish, condiviso in questo repository:https://github.com/UTsweetyfish/CVE-2023-38545. A differenza di quel POC, questo ├и per lo strumento da riga di comando e non per la libreria...
CVE-2026-42945
ЁЯЫбя╕П CVE-2026-42945 - NGINX Rift Kritischer Heap-basierter Puffer├╝berlauf in NGINX ЁЯУМ ├Ьbersicht CVE-2026-42945 auch bekannt als NGINX Rift ist eine kritische Sicherheitsl├╝cke im ngxhttprewritemodule von NGINX. Typ : Heap-basierter Puffer├╝berlauf CWE-122 Entdeckt : Mai 2026 Existierte seit : 18 Jahren...
DEBIAN-CVE-2026-77652
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...
CVE-2026-40369
ЁЯЪи CVE-2026-40369 - рд╡рд┐рдВрдбреЛрдЬ рдХрд░реНрдиреЗрд▓ рд╡рд┐рд╢реЗрд╖рд╛рдзрд┐рдХрд╛рд░ рдЙрдиреНрдирддрд┐ рднреЗрджреНрдпрддрд╛ рд╡рд┐рдВрдбреЛрдЬ рдХрд░реНрдиреЗрд▓ рд╣реАрдк-рдЖрдзрд╛рд░рд┐рдд рдмрдлрд░ рдУрд╡рд░рдлреНрд▓реЛ рдЬреЛ рд╕реНрдерд╛рдиреАрдп рд╣рдорд▓рд╛рд╡рд░реЛрдВ рдХреЛ рд╡рд┐рд╢реЗрд╖рд╛рдзрд┐рдХрд╛рд░реЛрдВ рдХреЛNT AUTHORITY\SYSTEM рддрдХ рдмрдврд╝рд╛рдиреЗ рдХреА рдЕрдиреБрдорддрд┐ рджреЗрддрд╛ рд╣реИред ЁЯУЦ рдЕрд╡рд▓реЛрдХрди CVE-2026-40369 рдПрдХ рдЙрдЪреНрдЪ рдЧрдВрднреАрд░рддрд╛ рд╡рд╛рд▓реА рд╡рд┐рд╢реЗрд╖рд╛рдзрд┐рдХрд╛рд░ рдЙрдиреНрдирддрд┐ рднреЗрджреНрдпрддрд╛ рд╣реИ рдЬреЛ рдорд╛рдЗрдХреНрд░реЛрд╕реЙрдлреНрдЯ рд╡рд┐рдВрдбреЛрдЬ рдХрд░реНрдиреЗрд▓ рдШрдЯрдХреЛрдВ рдХ...
CVE-2026-77652 Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...
EUVD-2026-66675
A heap-based buffer overflow vulnerability exists in the Dia diagram editor WPG file format importer. In plug-ins/wpg/wpg-import.c, the WPG import renderer allocates a fixed palette with: ren-pPal = gnew0WPGColorRGB, 256; When handling a WPGCOLORMAP record, the parser reads a start index i16 and...
CVE-2026-77652
A heap-based buffer overflow in the Dia diagram editor's WPG file importer (plug-ins/wpg/wpg-import.c ) allows out-of-bounds writes into a fixed 256-entry color palette. The WPG_COLORMAP record handler validates the start index only against the WPG record size, not the palette capacity, so a craf...
CVE-2026-14664
A flaw was found in PostgreSQL. A heap buffer overflow vulnerability exists in the regexp component, which can be triggered by a query author providing text that does not pass encoding validation. This can lead to unanticipated data growth, allowing the attacker to execute arbitrary code as the...
CVE-2026-80568
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...
CVE-2026-80570
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...
CVE-2026-80570 Input: synaptics-rmi4 - zero report size on F54 work error
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...
CVE-2026-80570
CVE-2026-80570 is a heap buffer overflow in the Linux kernel's synaptics-rmi4 input driver. In rmi_f54_work(), an error during report request or command verification jumped to the error label, bypassing the abort label where f54->report_size was normally zeroed. The stale payload size then cau...
CVE-2026-80570 Input: synaptics-rmi4 - zero report size on F54 work error
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - zero report size on F54 work error In rmif54work, if an error occurs during report request or command verification, the code jumped directly to the 'error' label, bypassing the 'abort' label where...
CVE-2026-80568 Input: synaptics-rmi4 - block s_input when F54 queue is busy
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...
CVE-2026-80568
This Linux kernel vulnerability affects the synaptics-rmi4 input driver. When the diagnostic report type is changed mid-stream via VIDIOC_S_INPUT , the report size can change while V4L2 buffers remain allocated at their original stream-start size, leading to a heap buffer overflow if the new size...
CVE-2026-80568 Input: synaptics-rmi4 - block s_input when F54 queue is busy
In the Linux kernel, the following vulnerability has been resolved: Input: synaptics-rmi4 - block sinput when F54 queue is busy Changing the input diagnostic report type mid-stream changes the report size. Since V4L2 buffers are allocated based on the size at stream start, changing the input whil...