109 matches found
CVE-2022-43343
CVE-2022-43343 の説明 N-Prolog v1.91 において、Main.c の関数 gettoken にグローバルバッファオーバーフローの脆弱性が発見されました。 再現方法 脆弱性を再現するには、脆弱なバージョンの N-Prolog v1.91 をダウンロードし、プロジェクトをコンパイルします。 root@kitploit: git clone https://github.com/sasagawa888/nprolog.git cd nprolog git checkout ae7cc9bf6087cfcb57baadbe59f5005c6dc0f09c make...
The vulnerability of the fwctl_exit() function in the drivers/fwctl/main.c module of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the fwctlexit function in the drivers/fwctl/main.c file of the Linux kernel module involves access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability in the driver/dma/fsl-edma-main.c component of the Linux operating system allows a hacker to cause a service failure.
The vulnerability in the drivers/dma/fsl-edma-main.c component of the Linux operating system is related to the unlocking of a resource that was not locked in the first place. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2026-52791: Incorrect Privilege Assignment
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during openOTRUNC and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with...
CVE-2026-28207: Improper Neutralization of Special Elements used in an OS Command
Zen C is a systems programming language that compiles to human-readable GNU C/C11. Prior to version 0.4.2, a command injection vulnerability CWE-78 in the Zen C compiler allows local attackers to execute arbitrary shell commands by providing a specially crafted output filename via the -o...
CVE-2026-21878: Improper Limitation of a Pathname to a Restricted Directory
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...
CVE-2025-65410: Stack-based Buffer Overflow
A stack overflow in the src/main.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service DoS via injecting a crafted input into the filename parameter...
Integer Overflow or Wraparound
Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via the setupLookaside function in the main.c file. An attacker can cause the application to crash or become unresponsive by sending specially crafted input that triggers an integer overflow. Remediation...
EUVD-2020-13450
Malware in sbrugna...
EUVD-2019-5248
Malware in sbrugna...
EUVD-2025-25840
Malicious code in bioql PyPI...
EUVD-2022-46382
Malicious code in bioql PyPI...
CVE-2025-22413
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-22413
A logic error in multiple functions of hyp-main.c within the Android kernel (specifically the KVM subcomponent) can lead to local information disclosure and potential privilege escalation . The vulnerability does not require additional execution privileges or user interaction for exploitation. Th...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which originates from a logic error in multiple functions in hyp-main.c. An attacker could exploit this vulnerability to cause a local information leak...
CVE-2025-22413: Improper Check or Handling of Exceptional Conditions
In multiple functions of hyp-main.c, there is a possible privilege escalation due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
Linux Distros Unpatched Vulnerability : CVE-2019-13989
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dpic 2019.06.20 has a Stack-based Buffer Overflow in the wfloat function in main.c. CVE-2019-13989 Note that Nessus relies on the presence of the package as...
The vulnerability in the `drivers/infiniband/hw/bnxt_re/main.c` component of the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the drivers/infiniband/hw/bnxtre/main.c component of the Linux operating system is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability can allow an attacker to cause a service failure...
CVE-2025-5297: Stack-based Buffer Overflow
A vulnerability, which was classified as critical, has been found in SourceCodester Computer Store System 1.0. This issue affects the function Add of the file main.c. The manipulation of the argument laptopcompany/RAM/Processor leads to stack-based buffer overflow. An attack has to be approached...