CVE-2026-45185

CVE-2026-45185 — Dead.Letter: ثغرة استخدام بعد التحرير Heap UAF في Exim تؤدي إلى صلاحيات الجذر عن بُعد CVSS 9.8 حرجة | Exim 4.97–4.99.2 | بنيات Ubuntu / GnuTLS | بدون مصادقة تقرير كامل مع تتبّع GDB، وتحليل خطوة بخطوة، وبيانات التعرض العالمية:...

CVE-2020-9273

CVE-2020-9273 هذه هي الملفات التي أنشأتها أثناء تحليل واستغلال CVE-2020-9273 - ثغرة use-after-free في ذاكرة heap في ProFTPd. ألقِ نظرة على فيديو الاستغلال هنا. وصف الملفات في هذا المستودع: poc-not-really-v4.c - مقال وإثبات مفهوم PoC كتبته العام الماضي أكتوبر/2020، اقرأه لفهم مسار الاستغلال؛...

CVE-2026-56848

CVE-2026-56848 وصف NVD يوجد خلل في معالجة HTTP/2 في Node.js يسمح باستدعاء nghttp2sessionmemsend بشكل إعادة الدخول re-entrant بينما يكون nghttp2sessionmemrecv قيد التنفيذ، مما يؤدي إلى استخدام الذاكرة المحررة heap-use-after-free. تؤثر هذه الثغرة على Node.js 26.x و24.x و22.x. ملاحظة: تنطبق الإصدارا...

CVE-2018-1000030

CVE-2018-1000030 Python 2.7.14 معرّض لثغرة تجاوز سعة المخزن المؤقت Heap-Buffer-Overflow بالإضافة إلى ثغرة استخدام الذاكرة بعد تحريرها Heap-Use-After-Free. قد تكون إصدارات Python السابقة للإصدار 2.7.14 معرّضة أيضًا لهذه الثغرات، ويبدو أن Python 2.7.17 والإصدارات السابقة له قد تكون معرّضة أيضًا، إل...

DEBIAN-CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

The m17n-lib library contains a heap use-after-free write vulnerability in the re_init_ic() function. A user providing specially crafted text input can trigger this condition during input-method state transitions , where the library frees an internal input context object but subsequently attempts...

EUVD-2026-94365

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167 M17n-lib: heap use-after-free write in re_init_ic()

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

CVE-2026-107167

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

PT-2026-107535

A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after-free condition during input-method state transitions. Under specific conditions, the library frees an internal input context object but subsequently attempts to write to that freed memory. Thi...

Oracle Linux 8 : dovecot (ELSA-2026-76763)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-76763 advisory. - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 - fix CVE-2026-42007: heap use-after-free in...

Linux Distros Unpatched Vulnerability : CVE-2026-107167

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in m17n-lib. A user providing specially crafted text input can trigger a heap use-after- free condition during input-method state transitions...

dovecot security, bug fix, and enhancement update

1:2.3.16-15 - fix CVE-2026-33605: ManageSieve login deadlock caused by lone CR protocol violation RHEL-251995 1:2.3.16-14 - fix CVE-2026-42007: heap use-after-free in pigeonhole editmailsnapshot after deleteheader operation RHEL-251946 1:2.3.16-13 - fix CVE-2026-40018: incorrect escaping of...

teamspeak3-vulnerabilities

TeamSpeak 3 Server - إثباتات مفهوم الاستغلال يحتوي هذا المستودع على كود إثبات المفهوم لثلاثة ثغرات أمنية CVE-2026-4390, CVE-2026-4391 و CVE-2026-4392 تم اكتشافها في خادم TeamSpeak 3 الإصدار 3.13.7. تم الإبلاغ عن جميع النتائج بشكل مسؤول إلى TeamSpeak ونشرت في استشارتنا. للحصول على شرح تقني مفصل حو...

Astra Linux – Vulnerability in imagemagick

ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 7.1.2.23 and 6.9.13-48, a crafted MSL image could trigger a heap-use-after-free vulnerability. Versions 7.1.2.23 and 6.9.13-48 have fixed this issue...

List-CVE-2025-2026

CVE-2025-69412 - إصدارات KDE messagelib قبل 25.11.90 تتجاهل أخطاء SSL الخاصة بـ threatMatches:find في Google Safe Browsing Lookup API المعروف أيضًا باسم phishing API، مما قد يسمح ... 2. CVE-2025-69413 - في Gitea قبل الإصدار 1.25.2، يعيد /api/v1/user استجابات مختلفة عند فشل المصادقة اعتمادًا...

openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()

A flaw was found in OpenSSL. When processing a specially crafted PKCS7 or S/MIME Secure/Multipurpose Internet Mail Extensions signed message, a heap use-after-free vulnerability in the PKCS7verify function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an emp...

Rocky Linux 10.2 [CIQ] Security Update: freerdp / freerdp-debuginfo / freerdp-debugsource / freerdp-devel / etc Multiple Vulnerabilities (crlsa-2026_19142)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202619142 advisory. freerdp: FreeRDP: Denial of service via heap use-after-free during auto-reconnect CVE-2026-25997 freerdp: FreeRDP: Denial of service due to...