CVE-2020-9273

CVE-2020-9273 这些是我在分析并利用 CVE-2020-9273（ProFTPd 中的一个堆释放后使用漏洞）期间创建的文件。 请在此处观看利用演示视频：链接。 此仓库中文件的说明： poc-not-really-v4.c —— 我去年（2020年10月）撰写的一篇文章和PoC，阅读后可以理解利用路径； exploitdemo.c —— 去年发布的演示利用程序，包含硬编码地址； exploitproftpd.c —— 针对本地测试的可靠利用程序，完成于2021年8月16日。 如有问题或评论，请随时私信我。...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - Exploits de Prueba de Concepto Este repositorio contiene código de prueba de concepto para tres vulnerabilidades CVE-2026-4390, CVE-2026-4391 y CVE-2026-4392 descubiertas en el servidor TeamSpeak 3 3.13.7. Todos los hallazgos fueron divulgados de manera responsable a TeamSpea...

List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib anterior a 25.11.90 ignora los errores SSL para threatMatches:find en la API de búsqueda de Google Safe Browsing también conocida como API de phishing, lo que podría permitir ... 2. CVE-2025-69413 - En Gitea anterior a 1.25.2, /api/v1/user tiene diferentes...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: UAF de heap en Exim a root remoto CVSS 9.8 Crítico | Exim 4.97–4.99.2 | Compilaciones de Ubuntu / GnuTLS | Sin autenticación Informe completo con traza de GDB, análisis paso a paso y datos de exposición global:...

CVE-2026-56848

CVE-2026-56848 Descripción de NVD Una falla en el manejo de HTTP/2 en Node.js permite que se llame a nghttp2sessionmemsend de forma reentrante mientras nghttp2sessionmemrecv está en ejecución, lo que resulta en un heap-use-after-free. Esta vulnerabilidad afecta a Node.js 26.x, 24.x y 22.x. Nota:...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 存在堆缓冲区溢出以及释放后使用漏洞。早于 2.7.14 的 Python 版本也可能受影响，并且 Python 2.7.17 及更早版本似乎也存在此漏洞，但尚未确认。 ERRASANTHREADC18...

Rocky Linux 8 [CIQ] Security Update: compat-openssl10 / compat-openssl10-debuginfo / etc (crlsa-2026_36215)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202636215 advisory. openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 10.1 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_16014)

The Rocky Linux 10.1 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202616014 advisory. freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect CVE-2026-25997 freerdp: FreeRDP: Denial of service due to...

Rocky Linux 8 [CIQ] Security Update: dnsmasq / dnsmasq-debuginfo / dnsmasq-debugsource / dnsmasq-utils / etc (crlsa-2022_7633)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20227633 advisory. dnsmasq: Heap use after free in dhcp6norelay CVE-2022-0934 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CentOS Linux 6 [TuxCare] Security Update: squid Multiple Vulnerabilities (CENTOS6:CLSA-2026:1774946829)

The CentOS Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1774946829 advisory. - Squid is a caching proxy for the Web. Prior to version 7.5, due to premature release of resource during expected lifetime and heap...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc Multiple Vulnerabilities (crlsa-2026_8317)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268317 advisory. squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling CVE-2026-33526 Squid: Squid: Denial of Service via crafted ICP traffi...

Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_61383)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661383 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via HTTP...

CentOS Linux 7 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1789399498)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1789399498 advisory. - ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. A crafted MSL image triggers memory...

Rocky Linux 8 [CIQ] Security Update: hivex / hivex-debuginfo / hivex-debugsource / hivex-devel / etc (crlsa-2024_0135)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20240135 advisory. QEMU: e1000e: heap use-after-free in e1000ewritepackettoguest CVE-2023-3019 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_6340)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20266340 advisory. freerdp: FreeRDP heap-use-after-free CVE-2026-22856 freerdp: FreeRDP heap-buffer-overflow CVE-2026-22854 freerdp: FreeRDP heap-buffer-overflow CVE-2026-228...

CentOS Linux 8.4 [TuxCare] Security Update: ImageMagick / ImageMagick-c++ / ImageMagick-c++-devel / etc Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1775669370)

The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1775669370 advisory. - ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2-15 and...

Rocky Linux 10.2 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-devel / nodejs-docs / etc Multiple Vulnerabilities (crlsa-2026_61376)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661376 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via...

Rocky Linux 9.6 [TuxCare] Security Update: nginx / nginx-all-modules / nginx-core / nginx-filesystem / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1785509707)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1785509707 advisory. - NGINX Open Source and NGINX Plus have a vulnerability in the ngxmailsmtpmodule that might allow an unauthenticated attacker to...

Rocky Linux 9 [CIQ] Security Update: compat-openssl11 / compat-openssl11-debuginfo / etc (crlsa-2026_44438)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202644438 advisory. openssl: Heap Use-After-Free in OpenSSL PKCS7verify CVE-2026-45447 Tenable has extracted the preceding description block directly from the CIQ security advisory...