Lucene search
+L

240 matches found

Kitploit
Kitploit
added 2026/09/09 10:37 p.m.8 views

shellcode2assembly

ShellcodeToAssembly Replace in shellcodetoasm.py with your shellcode. Endian type is little endian. root@kitploit: shellcode = '' Installation git clone https://github.com/blacknbunny/ShellcodeToAssembly.git && cd ShellcodeToAssembly/ && pip2 install -r requirements.txt && python2 shellcodetoasm....

6AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2026/09/08 10:07 a.m.4 views

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS0.00245EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/09/08 7:45 a.m.6 views

xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS0.00245EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/09/01 9:31 p.m.9 views

EUVD-2026-66347

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

8.2CVSS5.3AI score0.0033EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.18 views

Linux Distros Unpatched Vulnerability : CVE-2026-18664

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems,...

9.1CVSS5.9AI score0.0033EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/26 12:02 p.m.7 views

CVE-2026-18664

A flaw was found in NSD. On systems using little-endian architecture, the software incorrectly compares IP addresses against defined Access Control List ACL ranges. This misinterpretation can lead to a bypass of intended access controls, where IP addresses that should be denied access are instead...

9.1CVSS5.2AI score0.0033EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/26 9:16 a.m.3 views

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 9:16 a.m.11 views

DEBIAN-CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS5.9AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/26 9:16 a.m.5 views

UBUNTU-CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

8.2CVSS5.8AI score0.0033EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/08/26 8:34 a.m.20 views

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS5.9AI score0.0033EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2026/08/26 8:34 a.m.15 views

CVE-2026-18664

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

9.1CVSS5.8AI score0.0033EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/08/26 8:34 a.m.37 views

CVE-2026-18664 Wrong interpretation of ACL ranges

When ranges are used for access control i.e. of the form 1.2.3.4-1.2.3.25, because NSD wrongly compares the IP address with the range on little endian systems, IPs that were meant to be allowed may be denied, and, IPs that were meant to be denied access could be allowed. An IPv4 address is compar...

8.2CVSS0.0033EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/26 8:34 a.m.36 views

CVE-2026-18664

NSD (Name Server Daemon) by NLnet Labs contains an endianness bug in its ACL range comparison logic. On little-endian systems, IPv4 and IPv6 addresses are compared against access-control ranges (e.g., 1.2.3.4–1.2.3.25) using host endianness, while the values are stored in network byte order (big-...

9.1CVSS5.3AI score0.0033EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/08/10 10:17 p.m.16 views

CVE-2026-6426

A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling. The destination buffer size is stored as a uint64t but read by the VMSVBUFFER load path as a signed int32t. On little-endian hosts, a crafted incoming migration state with bit 31 set causes the value to b...

4.4CVSS0.00239EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/17 8:17 p.m.13 views

DEBIAN-CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/17 8:17 p.m.12 views

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS0.00245EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
added 2026/07/17 8:17 p.m.8 views

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.7AI score0.00245EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/17 7:44 p.m.18 views

EUVD-2026-45266

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00245EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2026/07/17 7:44 p.m.20 views

CVE-2026-16118

A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in xdgmimemagicparsemagicline in the xdgmimemagic.c file on little-endian systems when an attacker-controlled MIME magic file in a user-writable XDG data location e.g., in the $XDGDATAHOME/mime/magic path is parsed by an...

7.1CVSS5.6AI score0.00245EPSS
SaveExploits0
CVE
CVE
added 2026/07/17 7:44 p.m.60 views

CVE-2026-16118

CVE-2026-16118 : Affects the xdgmime component, specifically the heap-based overflow in _xdg_mime_magic_parse_magic_line() within xdgmimemagic.c. On little-endian systems, parsing a user-writable MIME magic file (e.g., $XDG_DATA_HOME/mime/magic) can trigger an out-of-bounds write of 2 bytes durin...

7.1CVSS5.6AI score0.00245EPSS
SaveExploits0References5
Rows per page
Query Builder