ReflectiveDLLInjection

About Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the library is responsible for loading itself by implementing a minimal Portable Executable PE fi...

CVE-2019-12594

CVE-2019-12594 This is a PoC for CVE-2019-12594, a vulnerability in DOSBox 0.74-2. Launching a calculator on the host from DosBox 0.74-2 The PoC for this vulnerability has been tested with the following configuration: DOSBox 0.74-2 Debian 10 amd64 Libc6 2.28-10...

CVE-2022-1227_Exploit

CVE-2022-1227Exploit A script for exploiting CVE-2022-1227. Background Ubuntu 20.10 is recommanded. Podman TODO: add what is the principle of this vulnerability Install podman Follow the instruction in the official document: https://podman.io/getting-started/installationinstalling-on-linux For...

dpdk: dpdk: Guest can desynchronize virtqueue size from inflight descriptor table size, causing out-of-bounds write

A flaw was found in DPDK lib/vhost. A guest can desynchronize virtqueue size from inflight descriptor table size, causing an out-of-bounds write in the host vhost process...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

Security update for docker

This update for docker fixes the following issue: CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate bsc1280683. Patch Instructions...

SUSE-SU-2026:5182-1 Security update for docker

This update for docker fixes the following issue: - CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response frames containing a crafted header value type byte outside the valid range can cause the host process to terminate bsc1280683...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

CVE-2026-54914

The WebAssembly Micro Runtime (WAMR) is vulnerable to a heap-buffer-overflow in its WASI poll_oneoff implementation prior to version 2.4.5 . The root cause is that wasi_poll_oneoff validates the output pointer for only one wasi_event_t, while the underlying wasmtime_ssp_poll_oneoff can write as m...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

dpdk: dpdk: Guest can trigger infinite loop in vhost-crypto writeback chain cleanup

A flaw was found in DPDK lib/vhost vhost-crypto. Write-back chain cleanup can follow an uninitialized next pointer when mapping a guest descriptor fails, causing the host vhost-crypto process to hang or crash...

CVE-2026-119132

A flaw was found in wasmtime. This vulnerability allows an untrusted WebAssembly Wasm guest program to cause a Denial of Service DoS by triggering an unhandled host process crash. When converting text between components using overlapping memory buffers, the runtime panics and terminates the host...

Bytecode Alliance wasmtime improper exception handling vulnerability

The Bytecode Alliance Wasmtime versions prior to 46.0.0 through 48.0.6 and 49.0.0 through 49.0.3 contain an improper exception handling vulnerability. This vulnerability stems from a legacy assertion within component::Func::call that disallows guest exports when asynchronous ABI options are used...

UBUNTU-CVE-2026-115385

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests to abort the Unix host process. Guests with mutable preopened directory access can call set-times or set-times-at with negative seconds...

openSUSE 16 Security Update : amazon-ecs-init (openSUSE-SU-2026:22145-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22145-1 advisory. - CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. -...

PT-2026-121563

Wasmtime 46.0.0 before 48.0.4 and 49.0.0 before 49.0.2 contains a denial of service vulnerability in the wasmtime-wasi WASIp3 implementation that allows guests to abort the Unix host process. Guests with mutable preopened directory access can call set-times or set-times-at with negative seconds...

AZL-110040 CVE-2026-92391 affecting package mysql 8.0.46-2

A deeply nested multipart MIME structure constructed via the public API causes a stack overflow in libcurl during normal cleanup operations. An excessive recursion depth within curlmimefree leads to unbounded stack frame allocation during structure traversal, ultimately crashing the host process...

Security update for amazon-ecs-init

This update for amazon-ecs-init fixes the following issues: CVE-2026-84445: google.golang.org/grpc: DoS via crash due to missing ':authority' and 'Host' headers in gRPC-Go xDS servers bsc1279042. CVE-2026-89090: github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream: malformed EventStream response...

curl resource management error vulnerability

The curl version 7.56.0 to 8.22.0 contains a resource management vulnerability. This vulnerability arises from constructing deeply nested multipart MIME structures using public APIs, leading to a libcurl stack overflow during normal cleanup operations. Additionally, the recursive depth of...