List-CVE-2025-2026

CVE-2025-69412 — KDE messagelib до версии 25.11.90 игнорирует ошибки SSL для threatMatches:find в Google Safe Browsing Lookup API также известен как фишинговый API, что может позволить... 2. CVE-2025-69413 — В Gitea до версии 1.25.2, /api/v1/user возвращает разные ответы при неудачной...

CVE-2020-9273

CVE-2020-9273 이것들은 제가 CVE-2020-9273 - ProFTPd의 힙 use-after-free 취약점 분석 및 익스플로잇 과정에서 생성한 파일들입니다. 익스플로잇 비디오를 여기에서 확인하세요. 이 리포지토리의 파일들에 대한 설명: poc-not-really-v4.c - 작년2020년 10월에 작성한 글과 PoC입니다. 익스플로잇 경로를 이해하기 위해 읽어보세요. exploitdemo.c - 작년에 공개된 데모 익스플로잇으로, 하드코딩된 주소가 포함되어 있습니다. exploitproftpd.c - 신뢰할...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim 힙 UAF에서 원격 루트 권한 탈취까지 CVSS 9.8 치명적Critical | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 빌드 | 인증 불필요 GDB 트레이스, 단계별 분석, 전 세계 노출 데이터를 포함한 전체 분석 문서: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 이 취약점이란 Exim이 BDAT 본문 전송 중일 때 TLS closenotify 경보를 보내면...

CVE-2026-56848

CVE-2026-56848 NVD 설명 Node.js HTTP/2 처리의 결함으로 인해 nghttp2sessionmemrecv가 실행되는 동안 nghttp2sessionmemsend가 재진입 방식으로 호출될 수 있으며, 이로 인해 힙 사용 후 해제heap-use-after-free가 발생합니다. 이 취약점은 Node.js 26.x, 24.x 및 22.x에 영향을 미칩니다. 참고: 설명에 언급된 버전은 업스트림 nodejs 패키지에만 적용되며 Alpine이 배포하는 nodejs 패키지에는 적용되지 않습니다. 릴리스 라인| 취약...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 уязвим к Heap-Buffer-Overflow, а также к Heap-Use-After-Free. Версии Python до 2.7.14 также могут быть уязвимы, и, похоже, что Python 2.7.17 и более ранние версии также могут быть уязвимы, однако это не подтверждено ERRASANTHREADC18...

DEBIAN-CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

The m17n-lib library contains a heap use-after-free write vulnerability in the re_init_ic() function. A user providing specially crafted text input can trigger this condition during input-method state transitions , where the library frees an internal input context object but subsequently attempts...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Linux Distros Unpatched Vulnerability : CVE-2026-107167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

teamspeak3-vulnerabilities

Сервер TeamSpeak 3 — эксплойты Proof of Concept Этот репозиторий содержит код Proof of Concept для трёх уязвимостей CVE-2026-4390, CVE-2026-4391 и CVE-2026-4392, обнаруженных в сервере TeamSpeak 3 версии 3.13.7. Все находки были ответственно раскрыты TeamSpeak и опубликованы в нашем...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image could trigger a heap-use-after-free vulnerability. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Rocky Linux 9 [CIQ] Security Update: nodejs / nodejs-debuginfo / nodejs-debugsource / nodejs-devel / etc Multiple Vulnerabilities (crlsa-2026_61386)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202661386 advisory. nodejs: Node.js: Unauthorized filesystem access due to Permission Model enforcement flaw CVE-2026-58043 nodejs: Node.js: Remote memory exhaustion via HTTP...