788 matches found
CVE-2026-38763
CVE-2026-38763 An issue in Unistal Systems Pvt. Ltd. Protegent 360 v2.0.0.4 allows a local attacker to cause a denial of service in the kernel...
CVE-2017-6074-DOS
CVE-2017-6074 - DoS-Only Exploit Linux DCCP kernel panic This repository provides a modified version of the original CVE-2017-6074 exploit use-after-free in the Linux kernel DCCP subsystem, designed only to demonstrate Denial of Service DoS impact. An authenticated local user can trigger a kernel...
CVE-2026-79417
CVE-2026-79417 Proof-of-Concept PoC exploit for CVE-2026-79417, a local Denial-of-Service DoS vulnerability affecting Argus Monitor versions Where is a path to a signed ArgusMonitor.exe binary from an affected version of Argus Monitor. Building Dependencies OpenSSL 3.x or later MSYS2 UCRT64 1...
CVE-2026-20516
CVE-2026-20516: MiracastService confused deputy on Android TV Research and disclosure by Davide Di Matteo @Dingo97. This is my first credited CVE. I found an improperly exported, system-privileged Miracast service while researching a PEAQ Android TV. A caller can supply an intent extra that makes...
-Detection-and-Mitigation-for-CVE-2022-1679
-Detection-and-Mitigation-for-CVE-2022-1679 Description The ath9k is a Linux kernel driver supporting Atheros chips. A use-after-free flaw was found in the Linux kernel’s Atheros wireless adapter driver in the way a user forces the ath9khtcwaitfortarget function to fail with some input messages...
CVE-2026-58752
In aocunlockedioctlhandleionfd of aoc.c, there is a possible type confusion due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58783
A logic error in the code in multiple locations can lead to a local denial of service (DoS). Exploitation of this vulnerability requires System execution privileges , and no user interaction is required. The provided documents do not specify the exact software or hardware affected, the specific c...
CVE-2026-58752
In aocunlockedioctlhandleionfd of aoc.c, there is a possible type confusion due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-58752
A type confusion vulnerability exists in the aoc_unlocked_ioctl_handle_ion_fd function within aoc.c . The flaw stems from improper input validation , which could allow an attacker to cause a local denial of service . No additional execution privileges are required, and user interaction is not nee...
sssd: out-of-bounds read in the sssd
A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an...
sssd: out-of-bounds read in the sssd
A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder fails to properly handle raw bytes received from a pipe. Because the data is treated as a NUL-terminated C string without explicit termination, it results in an...
PT-2026-144554
In multiple locations, there is a possible way to trigger an unbounded loop in video decoder firmware due to a logic error. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
EulerOS Virtualization 2.15.0 : sssd (EulerOS-SA-2026-4733)
According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in the System Security Services Daemon SSSD. The pampasskeychildreaddata function within the PAM passkey responder...
Astra Linux – vulnerability in linux-6.1
In the Linux kernel, the following vulnerability has been resolved: RDMA/rxe: Validate numsge/cursge before indexing wqe-dma.sge For a user QP, qp-sq.queue is a ring that the application writes directly; hence rxepostsend takes the isuser branch and schedules sendtask without validating the WQE...
UBUNTU-CVE-2026-120749
A flaw was found in D-Bus. With a privileged Monitoring client attached for example dbus-monitor or busctl monitor, an unprivileged local user can cause dbus-daemon to abort if a driver-originated broadcast such as NameOwnerChanged or ActivatableServicesChanged cannot be delivered to a recipient...
PT-2026-137798
Name of the Vulnerable Software and Affected Versions Wi-Fi NPU FW affected versions not specified Description An incorrect bounds check in the Wi-Fi NPU FW allows for a possible out-of-bounds write, which is a condition where data is written outside the intended memory boundary. This issue can...
kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...
kernel: Bluetooth: hci_event: fix potential UAF in SSP passkey handlers
A flaw was found in the Linux kernel's Bluetooth subsystem. This vulnerability, a Use-After-Free UAF, exists within the Secure Simple Pairing SSP passkey handlers. It occurs when hciconn lookup and field access are performed without proper locking, allowing a connection to be freed concurrently...
CVE-2026-59021
In multiple locations, there is a possible denial of service due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-59020
In removeUserData of DevicePolicyManagerService.java, there is a possible denial of service due to a race condition. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...