List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib 25.11.90 से पहले का संस्करण Google Safe Browsing Lookup API उर्फ फ़िशिंग API में threatMatches:find के लिए SSL त्रुटियों को अनदेखा करता है, जो संभवतः ... 2. CVE-2025-69413 - Gitea 1.25.2 से पहले के संस्करण में, /api/v1/user विफल प्रमाणीकरण के लिए विभिन्न...

CVE-2020-9273

CVE-2020-9273 Dies sind die Dateien, die ich während der Analyse und Ausnutzung von CVE-2020-9273 erstellt habe – eine Heap Use-After-Free in ProFTPd. Sehen Sie sich das Exploit-Video hier an. Beschreibung der Dateien in diesem Repository: poc-not-really-v4.c – ein Artikel und poc, den ich letzte...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter: Exim Heap UAF से Remote Root तक CVSS 9.8 गंभीर | Exim 4.97–4.99.2 | Ubuntu / GnuTLS बिल्ड | बिना प्रमाणीकरण GDB ट्रेस, चरण-दर-चरण विश्लेषण और वैश्विक एक्सपोज़र डेटा के साथ पूरा लेख: https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html यह क्या है जब Exim...

CVE-2026-56848

CVE-2026-56848 Descrição do NVD Uma falha no tratamento de HTTP/2 no Node.js permite que nghttp2sessionmemsend seja chamado de forma reentrante enquanto nghttp2sessionmemrecv está em execução, resultando em um heap-use-after-free. Esta vulnerabilidade afeta Node.js 26.x, 24.x e 22.x. Nota: as...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 ist anfällig für einen Heap-Buffer-Overflow sowie einen Heap-Use-After-Free. Python-Versionen vor 2.7.14 könnten ebenfalls anfällig sein, und es scheint, dass Python 2.7.17 und frühere Versionen ebenfalls anfällig sein könnten, jedoch wurde dies nicht bestätigt...

DEBIAN-CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

The m17n-lib library contains a heap use-after-free write vulnerability in the re_init_ic() function. A user providing specially crafted text input can trigger this condition during input-method state transitions , where the library frees an internal input context object but subsequently attempts...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2026-107167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - Exploits de Prova de Conceito Este repositório contém código de prova de conceito para três vulnerabilidades CVE-2026-4390, CVE-2026-4391 e CVE-2026-4392 descobertas no servidor TeamSpeak 3 3.13.7. Todas as descobertas foram divulgadas de forma responsável à TeamSpeak e...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image could trigger a heap-use-after-free vulnerability. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Rocky Linux 9 [CIQ] Security Update: libxml2 / libxml2-debuginfo / libxml2-debugsource / libxml2-devel / etc Multiple Vulnerabilities (crlsa-2025_10699)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510699 advisory. libxml: Heap use after free UAF leads to Denial of service DoS CVE-2025-49794 libxml: Type confusion leads to Denial of service DoS CVE-2025-49796 libxml2...