CVE-2021-21300

CVE-2021-21300...

CVE-2017-8481

此存储库没有 README。...

CVE-2019-0708

CVE-2019-0708 尽情享用...

CVE-2016-0728

CVE-2016-0728...

CVE-2024-6387

CVE-2024-6387...

CVE-2023-25690-POC

CVE 2023 25690 - 概念验证 发布日期：2023年3月7日 基础评分| 机密性| 完整性影响| 可用性影响 ---|---|---|--- 9.8| 高| 高| 高 目录 公告描述 易受攻击的 Apache 配置详解 数据流 实验环境搭建 HTTP 请求拆分导致后端服务上的 HTTP 请求走私 识别 CRLF 注入 通过头部注入实现内部 HTTP 请求走私 影响 公告描述 Apache HTTP Server 版本 2.4.0 至 2.4.55 上的某些 modproxy 配置 允许发起 HTTP 请求走私攻击 。当 modproxy 与某种形式的 RewriteRule ...

CVE-2025-8571

CVE-2025-8571...

CVE-2022-28508

此存储库没有 README。...

WS_FTP-CVE-2023-40044

WSFTP-CVE-2023-40044 本仓库包含我追踪WSFTP CVE-2023-40044影响的所有内容 包括可能受影响的组织和使用了头部方法的域名。 我还构建了一个新闻滚动条，追踪关于MOVEit和WSFTP的最新报道，可在 https://firehose.kenbuckler.com/moveit 获取。...

MOVEit-CVE-2023-34362

MOVEit-CVE-2023-34362 包含我追踪 MOVEit CVE-2023-34362 影响的所有内容的仓库 包括可能受影响的组织和利用 SFTP Header 及 Cookie 发现方法的域名。 我还构建了一个新闻滚动条，用于追踪 MOVEit 的最新报道，访问地址：https://firehose.kenbuckler.com/moveit...

CVE-2024-11040

CVE-2024-11040 vllm-project vllm 版本 0.5.2.2 存在拒绝服务攻击漏洞。...

cve-2024-31497

此存储库没有 README。...

Astra Linux – Vulnerability in Cairo

A flaw was discovered in cairo’s image-compositor.c in all versions prior to 1.17.4. This flaw allows an attacker who can provide a crafted input file to cairo’s image-compositor for example, by convincing a user to open a file in an application that uses cairo, or if an application uses cairo on...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: KVM: x86/pmu: Disabled support for adaptive PEBS. Support for virtualizing adaptive PEBS has been discontinued. This is because KVM’s implementation is architecturally broken without an obvious or easy way to address the issue...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick, specifically in the code file coders/hdr.c. An attacker who submits a crafted file processed by ImageMagick could trigger undefined behavior, resulting in values that are outside the range of the type unsigned char. This likely leads to a disruption in the...

Astra Linux – Vulnerability in openjpeg2

There is a flaw in OpenJPEG’s T2 encoder in versions prior to 2.4.0. An attacker who can provide crafted input for OpenJPEG to process may cause a null pointer dereferencing. The most significant impact of this flaw is the availability of the application...

Astra Linux – Vulnerability in TIF format

An integer overflow flaw was discovered in libtiff, which resides in the tifgetimage.c file. This flaw allows an attacker to inject and execute arbitrary code when a user opens a crafted TIFF file. The greatest threat posed by this vulnerability relates to confidentiality, integrity, and system...

Astra Linux – Vulnerability in imagemagick

A flaw was discovered in ImageMagick version 7.0.11. In this version, an integer overflow in the WriteTHUMBNAILImage function in the coders/thumbnail.c file may lead to undefined behavior when processing a specially crafted image file submitted by an attacker. The greatest threat posed by this...

Astra Linux – Vulnerability in edk2

EDK2’s Network Package is vulnerable to an infinite loop vulnerability when parsing unknown options in the Destination Options header of IPv6. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of availability...

Astra Linux – Vulnerability in Composer

Composer is a dependency manager for PHP. The URLs for Mercurial repositories in the composer.json file at the root level, as well as the source download URLs, are not sanified correctly. Specifically crafted URL values allow code to be executed via the HgDriver if hg/Mercurial is installed on th...