List-CVE-2025-2026

CVE-2025-69412 - KDE messagelib 25.11.90 之前的版本在 Google Safe Browsing Lookup API（又称网络钓鱼 API）中会忽略 threatMatches:find 的 SSL 错误，这可能允许…… 2. CVE-2025-69413 - 在 Gitea 1.25.2 之前的版本中，/api/v1/user 对认证失败的响应会因用户名是否存在而不同。 3. CVE-2025-13820 - Comments WordPress 插件 7.6.40 之前的版本在使用 disqus.com...

CVE-2020-9273

CVE-2020-9273 这些是我在分析并利用 CVE-2020-9273（ProFTPd 中的一个堆释放后使用漏洞）期间创建的文件。 请在此处观看利用演示视频：链接。 此仓库中文件的说明： poc-not-really-v4.c —— 我去年（2020年10月）撰写的一篇文章和PoC，阅读后可以理解利用路径； exploitdemo.c —— 去年发布的演示利用程序，包含硬编码地址； exploitproftpd.c —— 针对本地测试的可靠利用程序，完成于2021年8月16日。 如有问题或评论，请随时私信我。...

CVE-2026-45185

CVE-2026-45185 — Dead.Letter：Exim 堆释放后使用（UAF）致远程 Root CVSS 9.8 严重 | Exim 4.97–4.99.2 | Ubuntu / GnuTLS 构建 | 未认证 包含 GDB 跟踪、逐步分析和全球暴露数据的完整技术文章： https://0init.github.io/cve-2026-45185-dead-letter-exim-rce.html 这是什么 当 Exim 处于 BDAT 主体传输中途时，发送 TLS closenotify 警报会导致 tlsclose 调用 gnutlsdeinit，释放 7,304 字节的...

CVE-2026-56848

CVE-2026-56848 NVD Description A flaw in Node.js HTTP/2 handling allows nghttp2sessionmemsend to be called re-entrantly while nghttp2sessionmemrecv is executing, resulting in a heap-use-after-free. This vulnerability affects Node.js 26.x, 24.x, and 22.x. Note: versions mentioned in the descriptio...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 es vulnerable a un Heap-Buffer-Overflow así como a un Heap-Use-After-Free. Las versiones de Python anteriores a 2.7.14 también pueden ser vulnerables y parece que Python 2.7.17 y anteriores también pueden ser vulnerables, sin embargo esto no ha sido confirmado...

DEBIAN-CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

The m17n-lib library contains a heap use-after-free write vulnerability in the re_init_ic() function. A user providing specially crafted text input can trigger this condition during input-method state transitions , where the library frees an internal input context object but subsequently attempts...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2026-107167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

teamspeak3-vulnerabilities

TeamSpeak 3 服务器 - 概念验证漏洞利用代码 本仓库包含针对 TeamSpeak 3 服务器（3.13.7）中发现的三个漏洞（CVE-2026-4390、CVE-2026-4391 和 CVE-2026-4392）的概念验证代码。 所有发现均已负责任地披露给 TeamSpeak，并发布在我们的公告中。 有关堆释放后使用漏洞（CVE-2026-4390）的详细技术文章，请参阅我的博客文章。 免责声明 此代码仅用于教育和研究目的。请负责任地使用，且仅可针对您拥有或已获得明确测试许可的系统。作者不对因使用本软件造成的任何滥用或损害承担责任。...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image could trigger a heap-use-after-free vulnerability. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc Multiple Vulnerabilities (crlsa-2026_8317)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20268317 advisory. squid: Squid: Denial of Service via heap Use-After-Free vulnerability in ICP handling CVE-2026-33526 Squid: Squid: Denial of Service via crafted ICP traffi...