CVE-2026-91958

A flaw was found in FreeRDP. This vulnerability allows a remote attacker to trigger out-of-bounds memory access by crafting a malicious Remote Desktop Protocol RDP connection file. When a user opens this file, the FreeRDP client fails to properly validate array values, leading to a heap buffer...

CVE-2021-3156

CVE-2021-3156 本ドキュメントでは、このリポジトリのコードを理解し、なぜそれが機能するのかを理解するために必要な知識をすべて含めています。すべての説明は、QUALYS が作成したレポートに基づいています。そこでは、さらに多くの悪用方法が説明されています。 必要条件 脆弱なバージョンの sudo は、レガシーバージョンの 1.8.2 から 1.8.31p2 までと、安定版の 1.9.0 から 1.9.5p1 までのすべてのバージョンで、デフォルト設定の場合です。 このリポジトリは Ubuntu 20.04 sudo 1.8.31 でテストされています。ここでは、root...

rust security update

An update is available for rust. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Rust is a systems programming language that runs blazingly fast, prevents...

openssl security, bug fix, and enhancement update

An update is available for openssl. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transpo...

RLSA-2026:67285 Important: rust security update

Rust is a systems programming language that runs blazingly fast, prevents segfaults, and guarantees thread safety. This package includes the Rust compiler and documentation generator. Security Fixes: libgit2: libgit2: Denial of Service due to heap out-of-bounds read from malicious Git server...

RLSA-2026:67165 Important: openssl security, bug fix, and enhancement update

OpenSSL is a toolkit that implements the Secure Sockets Layer SSL and Transport Layer Security TLS protocols, as well as a full-strength general-purpose cryptography library. Security Fixes: openssl: OpenSSL: Denial of Service via unbounded memory growth in QUIC server CVE-2026-14456 openssl: QUI...

EUVD-2026-79134

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

CVE-2026-19781 Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

Ashlar-Vellum Cobalt VS File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the targe...

CVE-2026-19781

Ashlar-Vellum Cobalt is vulnerable to a heap-based buffer overflow in its VS file parsing routine. The root cause is the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer, allowing an attacker to execute arbitrary code in the context of the c...

CVE-2026-91953

A flaw was found in FreeRDP. A malicious RDP Remote Desktop Protocol server or a man-in-the-middle attacker could exploit a heap buffer overflow vulnerability during connection negotiation, prior to authentication. By sending a specially crafted Server Redirection PDU Protocol Data Unit with an...

CVE-2026-91946

A flaw was found in FreeRDP. This information disclosure vulnerability exists in the RDPGFX server's ResetGraphics Protocol Data Unit PDU serializer. It fails to properly initialize padding bytes, allowing a remote attacker to receive uninitialized heap memory. This can lead to the disclosure of...

CVE-2026-91963

A flaw was found in FreeRDP. An uninitialized heap memory disclosure vulnerability exists in the urbdrc USB redirection channel. A malicious Remote Desktop Protocol RDP server can exploit this by inducing failing USB transfers, allowing it to read uninitialized heap memory from the client. This...

CVE-2026-11728 IBM MQ .NET client is vulnerable to remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in t...

EUVD-2026-78918

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow a remote attacker to cause a denial of service or potentially execute arbitrary code in t...

CVE-2026-11728

This vulnerability affects the IBM MQ .NET client 's asynchronous message receive handler, where a heap buffer overflow (CWE-787) can allow a remote attacker to cause a denial of service or potentially execute arbitrary code. The attack requires a malicious queue manager or a man-in-the-middle po...

CVE-2010-1205

libpng =1.4.2 の脆弱性 CVE-2010-1205 を利用したサンプルエクスプロイト gregbook - libpng ソースに付属するサンプルプログラム群 generate - libpng で読み込む際にヒープオーバーフローを引き起こす悪意のある PNG ファイルを生成 再現手順: ./build.sh すべてのライブラリと実行ファイルをビルド。gregbook/rpng2-x は libpng-1.4.2 バグあり にリンクされる ./generate/build/generate xploit.png（不正な形式の PNG ファイル）を生成 cd gregbook...

porfolio-Baron-Samedit

porfolio-Baron-Samedit これは CVE-2021-3156: Sudo のヒープベースのバッファオーバーフロー Baron Samedit に関する研究です。...

CVE-2026-54251

netty-incubator-codec-ohttp is a Netty incubator library implementing Oblivious HTTP (OHTTP) gateway and client functionality. Prior to 0.0.23.Final , the OHTTP gateway decryption path allocates a pooled direct (native off-heap) ByteBuf for decrypted plaintext before the AEAD tag is verified. Whe...

CVE-2026-54251 netty-incubator-codec-ohttp: [OHttpServerCodec] Native Direct-Memory Leak on AEAD Decryption Failure Leads to Gateway Denial of Service

netty-incubator-codec-ohttp implements Oblivious HTTP OHTTP gateway and client functionality using Netty. Prior to 0.0.23.Final, the OHTTP gateway decryption path in codec-ohttp/src/main/java/io/netty/incubator/codec/ohttp/OHttpRequestResponseContext.java allocates a pooled direct ByteBuf for...

DEBIAN-CVE-2026-91964

FreeRDP versions before 3.31.0 contain a heap-based buffer overflow in negosendnegotiationrequest when processing Server Redirection PDU messages with attacker-controlled LoadBalanceInfo fields. A malicious RDP server can trigger the overflow by sending an arbitrary-length field that gets written...